HEMLIG 


2024-04-10 


GOTEBORGS TINGSRATT 


B 2041-23 
Aktbilaga 251 


FU-sekretess maa tredje gärningsman pa fri fot 


Polisen 


Handläggande enhet 
Region Vast, Grova brotts- 
grupp 2 Rgn Vast 


Beslagsprotokoll 


Signerat av 


Signerat datum 


2021-5000-BG24055 


Diarienummer 


5000-K189802-21 


Misstänkt person 


Ali, Mahad Abdullahi, 19961025-0731 


Plats för verkställan 


Beslagenheten , Odinsgatan , Göteborg 


Datum och klockslag för verkställighet 


2021-02-25 09:56 


Beslutat av 
Wennergren, Anna 
Wennergren, Anna 


Verkställt av 
Nyholm, Susann 


Ändamäl med ätgärden 


* Kan antagas ha betydelse för utredningen av 


brott 


Brott 


0337 - Försök till mord 


Domstol för överklagan 


Beslag taget frän 


Solna tingsrätt Ali, Mahad Abdullahi 
Föremälspunkter 
Platsbeskrivning Status 
2021-5000-BG24055-1 MT bar telefonen i jackan. Faststalld 
Mobiltelefon ( 1 st) OBS! Ursprungligen beslagtagen i 
ärende K170392-21. BG18149-1 
Anspräkstagare 
Ali, Mahad Abdul- 
lahi 
Fabrikat : Apple IMEI-nr 1: 359464084447684 
Farg : Svart 
Platsbeskrivning Status 
2021-5000-BG24055-2 Mt hade telefonen i jackfickan. Faststalld 
Mobiltelefon ( 1 st) OBS! Ursprungligen beslagtagen i 
ärende K170392-21. BG18149-2 
Anspräkstagare 
Ali, Mahad Abdul- 
lahi 
Fabrikat : Apple IMEI-nr 1: 352619273971003 
Platsbeskrivning Status 
2021-5000-BG24055-3 Mt hade telefonen i jackfickan. Fastställd 
Mobiltelefon ( 1 st) OBS! Ursprungligen beslagtagen i 
ärende K170392-21. BG18149-3 
Anspräkstagare 
Ali, Mahad Abdul- 
lahi 


Fabrikat: Samsung 


Vit 


Färg : 
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Polisen 


Telefongenomgang 


2021-5000-BG24055-2 Apple Iphone D53gAP (Iphone 12) 
5000-K189802-21 


Polisen Region Vast 


2023-09-13 
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Innehällsförteckning 


3.2.7 


1:  SYFTE/UPPDRAG ci .iccsscosssssasssececscocecusdsesscsegessssdsassnasseesacssedivasesececedenssauevveesdesaanasdssaseseseseacass 3 
RR GALANG NAUNA KA DIN RAANG AA 3 
3 ue 3 
3:1, Information om enheten Red d evertere ad eae EE aa d Pad 3 
3.2: Teletondata titre e dida da ista 5 
3.2.1 
3.2.2 A eae 
3.2.3 Contacts 
3.2.4 Installed Applications (installerade appar).... 
3.2.5 User Accounts 
3.2.6 
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Upprättad av Datum Diarienr Saknr Version 
Henrik Norlin, Utredare Grova Brott 2023-09-13 5000-K189802-21 01.00 
1 Syfte/Uppdrag 


Genomgång av beslag 2021-5000-BG24055-2, en telefon med tillhörande SIM-kort beslagtagen från Mahad 
Ali 2021-02-11 kl 18.40 i samband med att Mahad Ali greps misstänkt för förberedelse till grovt rån 
(K170392-21) på Artillerigatan i Göteborg. Telefonen bars då i fickan på en jacka som Mahad hade på sig. 
Han satt i baksätet på en bil som stoppades av en polispatrull. Beslaget hade ursprungligen beslagsnummer 
2021-5000-BG18149-2. Beslaget hävdes sedemera och togs 2021-02-25 i beslag i ärende K189802-21 och 
fick i samband med detta sitt nya beslagnummer, 2021-5000-BG24055-2. 


Syfte med undersökningen är att utröna om det finns information av intresse för utredningen i den data 


som extraherats från telefonen. 
2 Metod 


Genomgången av telefonen följer de rubriker/mappar som är satta av telefontömningsprogramet UFED. 
Det finns flertalet rubriker/mappar som har ett irrelevant innehåll för utredningen, dessa rubriker kommer 
att granskas men inte presenteras i genomgången. 


Fokus för undersökningen är tidsperioden från november 2020 till 2021-02-11 då telefonen togs i beslag. 


3 Premisser 


3.1 Information om enheten 


Den beslagtagna telefonen är av märket Apple iPhone D53gAP (Iphone 12). 
Då telefonen töms på sitt innehåll är telefonnummer +46767112450 aktivt i telefonen. 
Inställt Apple ID ar fares.ameri@hotmail.com. 


Nedan följer ett utdrag på information om enheten från undersökningsprokollet. 
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@Polisen 


Henrik Norlin, Utredare Grova Brott 


Upprättad av 


Dokument 
Telefongenomgäng 


Datum 


2023-09-13 


Diarienr 


Saknr 


5000-K189802-21 


Version 


01.00 


Device Information 


Phone Settings 
Message Retention Duration 
Location Services Enabled 
iPhone enabled 


Find 
Tethering 
Last Hotspot Activi 
Model number 
Last used MSISDN 
Last user ICCID 
Serial 
Unique ID 
IMEI2 
IMEI 
AirDrop ID 
Time Zone 
pple ID 
iCloud account present 
Device Name 
Bluetooth device address 
ICCID 
MSISDN 
OS Version 
c Data 


VoiceMemo Size (bytes) 


2021-02-15 09:31:00(UTC+0 
D53gAP 


+46767112450 
89462048009093167238 
FFYDVQ4FOFOV 
00008101-0002192A1144001E 
352619273982109 
352619273971003 
Af707c1ff59d 

UTC+01:00) Stockholm (Europe 
fares.ameri@hotmail.com 


True 

iPhone 
<string>0C:19:F8:84:C2:A5</string> 
89462048009093167238 
46767112450 


VoiceMemo Entries 
UserData Size (bytes 
UserData Entries 

Storage available (Bytes) 
Book Size (bytes 

Book Entries 

Application Size (bytes) 


46324723712 
0 

0 
4812550144 


Application Entries 


16 


Logs Size (bytes 
Logs Entries 
Ringtone Size (bytes) 
Ringtone Entries 
Proofing Size (bytes 
Proofing Entries 


Storage capacity (Bytes) 
Network Interfaces 

Wi-Fi MAC address 

MAC address 

MAC address 


User Accounts (11) 


8577024 
127 


0 
0 
0 


0 
56925884416 


0C:19:F8:8B:10:4D 
0E:19:F8:8D:1E:EC 
0E:19:F8:8D:1E:13 


fares.ameri@hotmail.com |3589280D-9C42-417D- 
A65F-DCOSAE24F4A7 


fares.ameri@hotmail.com EF296EFC-9580-4 152- 
69B-3C8309030599 
fares.ameri@hotmail.com |4930F 164-34E3-4D8D- 
A092-A7948ADB8E9A 
i B98A. 


C707C967-1AB8-461A- 
97CC-24B3960B9EC9 


fares.ameri@hotmail.com |4A1617DD-5587-4640- 
8A0C-F8657D653993 


2021-01-26 
18:42:36(UTC+1) 


2021-01-17 
02:28:02(UTC+1) 


fares.ameri@hotmail.com ae E-40B7- | 2021-01-17 
ADC6-A22F77FD49FC | 02:28:01(UTC+1) 

fares.ameri@hotmail.com |679555A7-C4B3-4A4F- | 2021-01-26 
B9C3-46EA35C49359 | 18:41:47(UTC+1) 


2021-01-26 
18:42:36(UTC+1) 


2021-01-26 
18:41:47(UTC+1) 
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Upprättad av Datum Diarienr Saknr Version 
Henrik Norlin, Utredare Grova Brott 2023-09-13 5000-K189802-21 01.00 


Modell Apple IPhone 12 


IMEI 1: 352619273971003 
2: 352619273982109 


ICCID 89462048009093167238 


Följande innehall ar extraherat fran enheten: 


Content 


B Log Entries 


Rubriker och relevant innehall for utredningen redovisas nedan. 


3.2 Telefondata 
3.2.1 Aggregated Application Usage 


Under denna rubrik finns det 2 poster: com.apple music samt com.apple.CryptoTokenKit.setoken. 
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Upprättad av Datum Diarienr Saknr Version 
Henrik Norlin, Utredare Grova Brott 2023-09-13 5000-K189802-21 01.00 
3.2.2 Chats 


Under denna rubrik finns det 87 poster. Av dessa är 83 poster chattrådar i applikationen Snapchat. 


Konversation med okänd. Gröna pratbubblor skrivs av brukaren av snapchatkontot, blå av motparten. 
Motparten skriver mejladressen ”Jo email com". Jonas Tadesse är en person som av polisen i 
Göteborg bedöms tillhöra kriminellt nätverk ”Tadesse/Vermahmood”, i media benämnt som M-falangen. 


Participants (2) 


a Unknown (owner) 
ca10df2d-08df-4a1c-b8fe-96£409£9b03d 
Unknown 


be e7438411-632a-45d2-8b10-e9d2cad79107 


Conversation 


— Y Select/Deselect all 17 messages 


[OR e7438411-632a-45d2-8b10-e9d2cad79107 


2021-01-08 22:47:35(UTC+1) 
e7438411-632a-45d2-8b10-e9d2cad79107 
ise@gmail.com 
2021-01-11 23:06:19(UTC+1) 
e7438411-632a-45d2-8b10-e9d2cad79107 
Tadesse42134 
2021-01-11 23:06:25(UTC- 1) 
Sources (1 
e7438411-632a-45d2-8b10-e9d2cad79107 
Gótagatan 67 
3 2021-01-18 12:48:54(UTC+1) 
Sources (1 
e7438411-632a-45d2-8b10-e9d2cad79107 
https://gofile.io/d/IRbDV1 
B 2021-01-18 14:34:16(UTC+1) 
Sources (1) 
ca10df2d-08df-4a1c-b8fe-96f409f9b03d a * 
B 2021-01-18 14:38:58(UTC+1) 
Sources (1 
€7438411-632a-45d2-8b10-e9d2cad79107 


2021-01-18 15:53:10(UTC+1) 


Sources (1) 


e7438411-632a-45d2-8b10-e9d2cad79107 


Fa 2021-01-18 15:53:13(UTC+1) 


Sources (1) 


e7438411-632a-45d2-8b10-e9d2cad79107 


BS 2021-01-18 15:53:19(UTC+1) 


Sources (1 


e7438411-632a-45d2-8b10-e9d2cad79107 


rep] 


c» 


2021-02-04 04:18:43(UTC+1) 


e7438411-632a-45d2-8b10-e9d2cad79107 


2 ar sedan idag 


LAS 2021-02-04 04:18:43(UTC+1) 


Sources (1) 


Telefongenomgang 2021-5000-BG24055-2 , 2023-09-13 16:13 diarienr: 5000-K189802-21 82 


$ Polisen Dees sf. HEMLIG 


Upprättad av Datum Diarienr Saknr Version 
Henrik Norlin, Utredare Grova Brott 2023-09-13 5000-K189802-21 01.00 


cat10df2d-08df-4a1c-b8fe-96f409f9b03d 


B 2021-02-09 11:53:18(UTC+1) 
Sources (1 
ca10df2d-08df-4a1c-b8fe-96f409f9b03d 


Aha oki bror 


2021-02-09 12:15:20(UTC+1) 


rces (1 


Konversation med 10 andra okanda i snapchatgrupp. Grona pratbubblor skrivs av brukaren av 
snapchatkontot, bla av motparter. Chattraden bestar av ett stort antal meddelanden som inte ar av vikt for 
detta drende. 2021-02-11 kl 11:38:19 skriver en okand ett meddelande som riktar sig till Mahad. 


Participants (11) 
Unknown 

SS 1e2952de-e8e3-4281-a20f-6e95e47f4af4 

i Unknown 

e ff7c16d5-6aba-44b4-81ad-3a3f8aBfc4bb 
Unknown 

© U 76824092-37e2-4530-9fe5-3ee&bfBeae30 
Unknown 

© © 7ba29522-ab9e-444b-ba29-2fe80671781e 
Unknown 

pa dbdb2889-97af-41e7-8625-6b09021ef9d9 
Unknown 

SS 333b6188-0e9d-438f-955c-e6951c1eb7a1 
Unknown 

ev 271ec016-1f9b-4291-8e8d-5b42e330aa05 
Unknown 

© © 245Bcle-Ib4b-dedf-9409-65269fbb4bb1 
Unknown (owner) 

9 9 210df24-08df-Aa1c-bBfe-96140919b03d 
Unknown 

ev 0da6b7d7-43c3-47c6-a0f4-0efeb6ef7cdc 
Unknown 

CU e 


50bc1d97-da05-40bf-ab60-cf7ef4eb7055 


Conversation 
— v Select/Deselect all 364 messages 


ff7c16d5-6aba-44b4-81ad-3a3f8a8fc4bb 


Ey mahad kan du lågga en zingi på nån av kukarna 


2021-02-11 11:38:19(UTC+1) 
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Upprättad av Datum Diarienr Saknr Version 
Henrik Norlin, Utredare Grova Brott 2023-09-13 5000-K189802-21 01.00 


Ett meddelande skickas till telefonen i tjänsten "Imo" (App message) som är en tjänst för 
snabbmeddelanden. Kan laddas ned och brukas som en app i telefonen. Meddelandet skickas 2021-01-31 
och börjar med ”Hi, Mahad...”. 


Participants (1) 


Unknown 
= = 1022230000000000 


Conversation 


— v Select/Deselect all 1 messages 


Sources (1 


Ett meddelande skickas till telefonen i tjánsten "Imo" 2021-01-31 kl 19:10:24 med innehället "Maryan iso 
dir nr". Avsändare år "Mamma 9”. I telefonens kontaktbok har denna kontakt username Hawa 
Mohammed vilket óverensstámmer med Mahad Alis mammas namn. Telefonnumret kopplat till Hawa 
Mohammed i kontaktboken óverensstámmer med det telefonnummer Mahads mamma har angett i 
samband med passansókan. Se aven under rubriken Contacts. 


Participants (1) 


Mamma Y 
= Y 1002315238971943 


Conversation 


— Y Select/Deselect all 1 messages 


Sources (1 
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Upprättad av Datum Diarienr Saknr Version 
Henrik Norlin, Utredare Grova Brott 2023-09-13 5000-K189802-21 01.00 


Konversation med okänd i Snapchat 2021-02-02 dar användaren av kontot skriver tva 
meddelanden som handlar om Philip Carvalo: 


Participants (2) 


Inknown 
©  p0seetf-7de3-4e53-bcf1-8598315757c1 


Unknown (owner) 
9 9 (ai0df2d-OBdf-4a1c-b8fe-96f409f9b03d 
Conversation 
— v Select/Deselect all 2 messages 


cal0df2d-08df-4a1c-b8fe-96f409f9b03d 


Philip carvahlo 


5 
ER 


eS 2021-02-02 17:01:05(UTC+1) 


cal0df2d-08df-4aic-b8fe-96f409f9b03d 


Haktet Goteborg bror 


e 


2021-02-02 17:01:57(UTC+1) 


Sources (1 


Konversation med okänd i Snapchat 2021-02-04 till 2021-02-07 dar användaren av kontot skickar 
telefonnummer 0767112450 i ett meddelande. Detta nummer ar det som sitter i den extraherade 
telefonen. 


Participants (2) 


Unknown (owner) 
© ©  cat0df2d-OBdf-41c-bSfe-96f409f9b03d 


Unknown 
©  se8284e0-d4e2-4b46-b43b-34ceBfbcdedb 


Conversation 
— Y Select/Deselect all 7 messages 


5e8a84e0-d4e2-4b46-b43b-34ce8fbcdedb 


2021-02-04 20:39:11(UTC 1) 


Sources (1) 


cal0df2d-08df-4a1c-b8fe-96f409f9b03d 


2021-02-04 22:51:09(UTC *1) 
Sources (1) 
cat0df2d-08df-4a1c-b8fe-96f409f9b03d A 
eS 2021-02-04 22:51:16(UTC+1) 
Sources (1) 
cat0df2d-08df-4a1c-b8fe-96f409f9b03d e 
B 2021-02-04 22:54:39(UTC +1) 
a cat0df2d-08df-4a1c-b8fe-96f409f9b03d 
Y 


0767112450 


eS 2021-02-07 21:09:48(UTC+1) 


Sources (1 
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Konversation mellan anvåndaren av snapchatkontot och en okånd anvåndare innehåller 182 meddelanden. 
Det förefaller på tonen i meddelandena som att de har någon sorts kårleksrelation. I konversationen 
diskuteras en mailadress som skapats. Motparten skriver att hen gjort en ny mailadress, 
mahadmose96@outlook.com. Utdrag ur konversationen visas nedan. 


Participants (2) 


CH Unknown (owner) 
cal0df2d-08df-4a1c-b8fe-96f409f9b03d 

a Unknown 
aed38a7a-f7b8-4cb1-bc59-fef2612ea334 


Conversation E 


— Y Select/Deselect all 182 messages 


aed38a7a-f7b8-4cb1-bc59-fef2612ea334 


Mirette.milaja 


e£ 


2021-01-20 23:26:50(UTC+1) 


Sources (1 


aed38a7a-f7b8-4cb1-bc59-fef2612ea334 


Tror lösen ar dinmamma123 
2021-01-20 23:27: 05(UTC+1) 
aed38a7a-f7b8-4cb1-bc59-fef2612ea334 
Mirettemilaja 
a 2021-01-20 23:27:16(UTC+1) 
Sources (1 
aed38a7a-f7b8-4cb1-bc59-fef2612ea334 
Lösen ar kebab14233 
2021-01-20 23:27:30(UTC+1) 
cat0df2d-08df-4a1c-b8fe-96f409f9b03d A 
& 2021-01-21 03:08:39(UTC+1) 
Sources (1 
cal0df2d-08df-4a1c-b8fe-96f409f9b03d a ` 
B 2021-01-29 00:46:50(UTC+1) 
Sources (1) 
cat0df2d-08df-4a1c-b8fe-96f409f9b03d e 
B 2021-02-01 12:56:54(UTC+1) 
Sources (1 
aed38a7a-f7b8-4cb1-bc59-fef2612ea334 
e 2021-02-01 15:37:50(UTC+1) 
Sources ( ) 
aed38a7a-f7b8-4cb1-bc59-fef2612ea334 
Va tvungen göra ny Mail o den är mahadmose96@outlook.com 
B 2021-02-03 20:26:04(UTC+1) 
Sources (1 
ca10df2d-08df-4a1c-b8fe-96f409f9b03d 


on 


BS 2021-02-04 19:15:42(UTC+1) 


Sources (1 
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Konversation mellan användaren av snapchatkontot i telefonen och okänd motpart mellan 2021-01-31 och 
2021-02-01. Endast 3 utgáende meddelanden men dessa fórefaller innehälla bl.a. länkar till sökningar pa 
Airbnb-boenden i Stockholm under tiden 2021-02-18 till 2021-02-21. 


Participants (2) 


a Unknown (owner) 
cal0df2d-08df-4a1c-b8fe-96f409f9b03d 


a Unknown 
025b653b-7d16-444f-bcae-69a3025733cd 


Conversation 


cat0df2d-08df-4a1c-b8fe-96f409f9b03d 


https://www.airbnb.se/rooms/45111366? 
adults=S&check_in=2021-02-18&check_out=2021-02-21&source_impression_id=p3_1612098150_irAYTeTL6ftZEAKt 


&guests-1 


em 2021-01-31 14:04:22(UTC *1) 


ca10df2d-08df-4a1c-b8fe-96f409f9b03d 


https://www.airbnb.se/rooms/45095774/photos? 
adults=S&check_in=2021-02-18&check_out=2021-02-21&source_impression_id=p3_1612098320_ldns2yVy8Bpv9cSv 


2021-01-31 14:06:22(UTC+1) 


cal0df2d-08df-4a1c-b8fe-96f409f9b03d 
quality hotel friends arena 


2021-02-01 21:40:13(UTC+1) 


ws 


Besöker man länken som skickas 2021-01-31 kl 14:04:22 visas följande lagenhet vid St:Eriksplan, 


Norrmalm, Stockholm: 
€ > CA @ airbnb.se/rooms/45111366?adults- 5&check in=2021-02-188&check out-2021-02-218isource impression id=p3 1612098150 irAYTeTL6ftZEAKt&guest.. & 15 Y 


A airbnb Pábórja din sökning Q HyrutdittboendepáAirbnb @ = O 


å Utforska Sthlm. från denna mysiga Top Beläget Lgh. 
K 4,52- 87 omdömen - Norrmalm, Stockholms lån, Sverige 
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Hela boendet (lägenhet) med värden Fredrik 
7 gäster - 2 sovrum 3 sängar - 1 badrum 1512 kr SEK natt — * 4,52- 87 omdömen 
INCHECKNING UTCHECKNING 
-02-1 1-02- 
A sjálvstándig incheckning 2021:02:19 20210221 
Checka in dig själv via ett låst nyckelskäp. GÄSTER 
5 gäster Ka 
@ Something went wrong. Try your dates again 
Ba En del information har översatts automatiskt. Visa originalspråk 
Välkommen till Sthlm! 
Med bara några minuters promenad till S: t Eriksplan ligger denna ljusa, eleganta och 
eleganta lägenhet. Lägenheten är smakfullt inredd och med ett utrustat kök kan du njuta Detta är ett sällsynt fynd. Boendet VG 
av hemlagade måltider eller gå till en av de många hårliga restaurangerna runt. som Fredrik år vård för på Airbnb år 
vanligtvis fullbokat. 
Visa mer > 
Mt Rapportera den hår annonsen 
Besöker man lånken som skickas 2021-01-31 kl 14:06:22 visas en sida på airbnb med hus/stugor i 
Stockholmsområdet: 
& Semesterboenden och hyresläge X + E x 
€ > Cf? à airbnbse ex OG 
Q airbnb Vart som helst Vilken vecka som helst Lágg till gáster Q Hyr ut ditt boende pa Airbnb ` p = o 
e = at x ta X ES e a dium laus 
Stugor Fantastisk utsikt Vid sjón Vaderkvarnar Nationalparker Nara pisten Stora egendomar Luxe Wow! Ba 


Tyresö Strand, Sverige 
Privat värd 
8-13 okt. 


723 kr SEK natt 


* 4,76 


Ekerö, Sverige 
Privat várd 
30 sep.- 5 okt. 


902 kr SEK natt 


* 493  KnivstaC, Sverige * 4,85 Vaxholm, Sverige 
Privat várd Privat várd 
20-25 sep. 16-21 sep. 
530 kr SEK natt 13 083 kr SEK natt 


Visa karta 


. CR 


* 5,0 
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3.2.3 Contacts 


Under rubriken kontakter finns 6 poster. Samtliga hámtade ur kommunikationsappen "Imo". 
Kontakten "Mamma WS " har i telefonens kontaktbok användarnamnet Hawa Mohammed 
vilket överensstämmer med Mahad Alis mammas namn. Telefonnumret kopplat till Hawa 
Mohammed i kontaktboken 6verensstammer med det telefonnummer Mahads mamma har 
angett i samband med passansókan. 


BO Doo — Y |t GI XIA Interaction Statuses” Phones v Other Entries v T Name v Source v 
SKI | 
H 2 +252615459555 Username Maryan M Imo 
H 3 0708922241 Username Hawa Mohammed Mamma Y Imo 
H 4 +252615192542 Username Maryan Cabdi Marian Imo 
I 5 Z d Username Saida Saida Imo 
L| 6 H D Username . Sams Syster Imo 
3.2.4 Installed Applications (installerade appar) 
Under denna rubrik finns 657 poster. 
Bland dessa kan nämnas: 
Imo, Wickr Me, WhatsApp, SnapChat 
Installed Applications (4) 
# Name Description [ees [ees [eem [ee Je E: Iess 3 
ca! 
1 imo Version: Purchase Date Launches Categories E: 
videosamtal 2021.2.1 2021-01-31 Activations SocialNetwork 
och chatt Operation 18:12:34(UTC+1) Last Launch ing 
Application ID: | Mode: Install Date Active Time ChatApplicatio 
CE115431- Foreground Last Modified 00:00:00 ns 
55F0-4A7F- ication Deleted Date Background Time 
A700- Size (bytes): 0 00:00:00 
CDF76313D40 | Decoded: Yes 
5 Artifact Family: 
imoimiphone Source 
Source: Beposkory 
Path: 
2 Wickr Me - Version: 5.70.7 | Purchase Date Launches Categories e 
Private Operation 2019-07-29 Activations SocialNetwork 
Messenger Mode: 10:22:21(UTC+2) Last Launch ing 
Application ID: | Foreground Install Date Active Time ChatApplicatio 
8967301D- Application Last Modified 00:00:00 ns 
79BE-4FE8- | Size (bytes): 0 | Deleted Date Background Time 
AA2C- Artifact Family: 00:00:00 
7E9355385E2 | Source 
6 Reposioiy 
com.mywickr.w | Path: 
ickr 
Source: 
3 WhatsApp Version: Purchase Date Launches Categories D 
Messenger 2.21.11 2019-07-01 Activations SocialNetwork 
Application ID: | Operation 16:37:39(UTC+2) Last Launch ing 
ABEF7296- Mode: Install Date Active Time ChatApplicatio 
2D14-49C3- Foreground Last Modified 00:00:00 ns 
9C4F- Application Deleted Date Background Time 
01C1F770A85 | Size (bytes): 0 00:00:00 
0 Decoded: Yes 
net whatsapp. | Artifact Family: 
WhatsApp Source 
Source: sont 
Path: 
4 Snapchat Version: Purchase Date Launches Categories e 
Application ID: | 11.11.0 2019-07-01 Activations Lifestyle 
C7B1980E- Operation 16:13:09(UTC+2) Last Launch ChatApplicatio 
7B2D-4ABE- Mode: Install Date Active Time ns 
97BC- Foreground 00:00:00 
5BC35109F32 | Application | bast Modified Background Time 
0 Size (bytes): 0 00:00:00 
com.toyopagro | Decoded: Yes 
up.picaboo Artifact Family: 
Source: Source 
Repository 
Path: 
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Polisen 


Upprättad av 


Henrik Norlin, Utredare Grova Brott 


Dokument 


Telefongenomgång 


Datum 


2023-09-13 


Diarienr 


Saknr 


5000-K189802-21 


Version 


01.00 


3.2.5 


Under denna rubrik finns 11 poster. 


User Accounts 


User Accounts (11) 


O ee ee E ME EE 


Accounts fares.ameri@hotmail.com |3589280D-9C42-417D- | 2021-01-26 
A65F-DCO5AE24F4A7 18:42:36(UTC+1) 

2 [Accounts fares.ameri@hotmail.com |EF296EFC-9580-4152- | 2021-01-17 
A69B-3C8309030599 02:28:02(UTC+1) 

3 |Accounts fares.ameri@hotmail.com | F33C8D6E-521E-40B7- | 2021-01-17 
ADC6-A22F77FD49FC 02:28:01(UTC+1) 

4 [Accounts fares.ameri@hotmail.com |679555A7-C4B3-4A4F- | 2021-01-26 
B9C3-46EA35C49359 18:41:47(UTC+1) 

5 | Accounts fares.ameri@hotmail.com |4930F164-34E3-4D8D- | 2021-01-26 
A092-A7948ADB8E9A 18:42:36(UTC+1) 

6 [Accounts fares.ameri@hotmail.com |5B5F18F8-FA5E-4D51- | 2021-01-17 
B98A-C36CD9608A41 02:27:49(UTC+1) 

7 Accounts fares.ameri@hotmail.com | B92BDECB-3A23-4BA2- | 2021-01-17 
ADFB-8BAD9080DECA | 02:31:21(UTC+1) 

8 |Accounts local C707C967-1AB8-461A- | 2021-01-17 
97CC-24B3960B9EC9 02:32:15(UTC+1) 

9 [Accounts fares.ameri@hotmail.com | AAESBF9F-BC3A-4439- | 2021-01-23 
B5AC-B83C5667396D 03:58:27(UTC+1) 

10 [Accounts local BCB524D8-CE9F-4BE5- | 2021-01-23 
A176-96DFF22F2423 04:04:51(UTC+1) 

11 [Accounts fares.ameri@hotmail.com |4A1617DD-5587-4640- | 2021-01-26 
8A0C-F8657D653993 18:41:47(UTC+1) 

3.2.6 Images 


Under denna rubrik finns 13433 poster. 


Inga poster / bilder av betydelse for utredningen. 


3.2.7 


Videos 


Under denna rubrik finns 740 poster. De nedan redovisade posterna gar inte att säga hur videorna har 


lagrats i telefonen, dvs om de skapats i telefonen eller skickats till telefonen. 
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2021-02-08 kl 03:30:04 har ett 9 sek langt filmklipp lagrats i telefonen dar en hand som förefaller tillhóra 


filmaren hanterar en stor mängd 500-kronorssedlar. 


Videos 


Details 


ro 
© 
7 
Save 


Name: 


Type: 
Size (bytes): 
Path: 


Created: 
Accessed: 
Modified: 
Changed: 
Deleted: 
Extraction: 
MDS: 


Source file: 


Goto v 


cm-chat-media-video-Gkpi7z5wg0nvDAKDOUMw3.mov | 2021-02-08 03:30:04 «01:00 Dr 


cm-chat-media-video- 
Gkpi7zSwgOnvDAKDOUMw3.mov 

Videos 

1707046 
00008101-0002192A1144001E_files_partial- 
bfu.zip/private/var/mobile/Containers/Data/ 
Application/ 
C7B1980E-7B2D-4ABE-97BC-5BC35109F320/ 
Library/Persistent/SCMedia/cm-chat-media- 
video-Gkpi725wg0nvDAKDOUMw3.mov 
2021-02-08 03:30:04(UTC- 1) 

2021-02-08 03:30:04(UTC- 1) 

2021-02-08 03:30:04(UTC+1) 


Legacy 
5572dd5497c2cecf2bdfddd451d55883 


cm-chat-media-video- 


Gkpi7z5wg0nvDAKDOUMw3.mov 
> m x 0005/00099 — di 


2021-08-07 kl 20:37:13 har ett 8 sek langt filmklipp lagrats i telefonen dar en hand som förefaller tillhöra 


filmaren hanterar en stor mängd 500-kronorssedlar. 


Videos 


Details 


Save 


Name: 


Type: 
Size (bytes): 
Path: 


Created: 
Accessed: 
Modified: 
Changed: 
Deleted: 
Extraction: 
MD5: 


Source file: 


Goto + 


cm-chat-media-video-kHdt2xpw3SzsD4rirgbdl.mov | 2021-02-07 20:37:13 «01:00 +” 


cm-chat-media-video- 
kHdt2xpw3SzsD4rlrgbdl.mov 

Videos 

1347824 
00008101-0002192A1144001E files partial- 
bfu.zip/private/var/mobile/Containers/Data/ 
Application/ 
C7B1980E-7B2D-4ABE-97BC-5BC35109F320/ 
Library/Persistent/SCMedia/cm-chat-media- 
video-kHdt2xpw3SzsD4rlrgbdl.mov 
2021-02-07 20:37:13(UTC+1) 

2021-02-07 20:37:13(UTC+1) 

2021-02-07 20:37:13(UTC« 1) 


Legacy 
a0993201edb0d395062bb726fbadb3c2 
cm-chat-media-video- 
kHdt2xpw3SzsD4rlrgbdl.mov > m x 00:06/00:08 ` di — 
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2021-02-07 kl 15:40:42 har ett 9 sek långt filmklipp lagrats i telefonen som förefaller vara en selfiefilm på 
Shaban Muse, vilket år Mahad Alis bror. 


Videos Goto ~ 


Details 


cm-chat-media-video-W3K8PJa8NMnWotavN3XGY.mov | 2021-02-07 15:40:42 +01:00 +” 


©) 


Save 

Name: cm-chat-media-video- 
W3K8PJa8NMnWotavN3XGY.mov 

Type: Videos 

Size (bytes): 1710229 

Path: 00008101-0002192A1144001E files partial- 
bfu.zip/private/var/mobile/Containers/Data/ 
Application/ 
C7B1980E-782D-4ABE-97BC-58C35109F320/ 
Library/Persistent/SCMedia/cm-chat-media- 
video-W3K8PJa8NMnWotavN3XGY.mov 

Created: 2021-02-07 15:40:42(UTC+1) 

Accessed: 2021-02-07 15:40:42(UTC+1) 

Modified: 2021-02-07 15:40:42(UTC+1) 

Changed: 

Deleted: 

Extraction: Legacy 

MD5: 76b4de0721191cba5cfa458711deb62a 

Source file: cm-chat-media-video- 


W3K8PJa8NMnWotavN3XGY.mov > = x 0005/0009 = 


2021-02-09 kl 17:55:52 har ett 9 sek langt filmklipp lagrats i telefonen som är en film pa Mahad Ali som 
sitter vid ett matbord. 
Videos Goto - 


Details 


€m-chat-media-video-x4LTUfQX4Zd372eKOAyQx.mov | 2021-02-09 17:55:52 +01:00 


Save 

Name: cm-chat-media-video- 
x4L1UfQX4Zd372eKO0AyQx.mov 

Type: Videos 

Size (bytes): 1585739 

Path: 00008101-0002192A1144001E files partial- 
bfu.zip/private/var/mobile/Containers/Data/ 
Application/ 
C7B1980E-7B2D-4ABE-97BC-5BC35109F320/ 
Library/Persistent/SCMedia/cm-chat-media- 
video-x4L1UfQX4Zd372eKO0AyQx.mov 

Created: 2021-02-09 17:55:52(UTC+1) 

Accessed: 2021-02-09 17:55:52(UTC « 1) 

Modified: 2021-02-09 17:55:52(UTC « 1) 

Changed: 

Deleted: 

Extraction: Legacy 

MD5: 4410bf5bab6b6ce8bd1199580928e87c 

Source file: cm-chat-media-video- 


x4L1UfQX4Zd372eK0AyQx.mov 


> =» x 0091/0009 ` di ———— 


GET: Protokoll över 
Polisen husrannsakan 
Enhet 


Region Stockholm, Grova brott 1 PO Sthlm Nord 


Signerat av 


Tove Lundström 
Signerat datum 


2021-02-25 


Diarienummer 


5000-K189802-21 


Ätgärder 

Beslut 

Typ Datum och tid Beslutsfattare 
Husrannsakan 2021-02-25 12:27 Wennergren, Anna 


Telefongenomgång 2021-BG24357-10 , 2023-11-01 14:47 diarienr: 5000-K189802-21 


122 


Polisen 


Telefongenomgang 


2021-5000-BG24357-10 Apple Iphone X 
5000-K189802-21 


Polisen Region Vast 


2023-09-13 
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1 Syfte/Uppdrag 


Genomgäng av beslag 2021-5000-BG24357-10, en telefon med tillhörande SIM-kort beslagtagen frän 
Mahad Ali 2021-02-25 kl 14.50 i arresten, polishuset Karlstad tillsammans med andra föremäl tillhörande 
Mahad. Mahad Ali hade dä stoppats och kontrollerats i en bil 2021-02-25 kl 11:15 i Töcksfors vid gränsen 
mellan Norge och Sverige. | bilen fanns ytterligare tre personer, S Aleksic, F Kücükgöl samt M Ali. | samband 
med kontrollen verkställdes ett anhallningsbeslut mot Mahad för försök till mord. Han greps och fördes till 


polishuset, Karlstad. 


Syfte med undersökningen är att utröna om det finns information av intresse för utredningen i den data 


som extraherats fran telefonen. 
2 Metod 


Genomgángen av telefonen följer de rubriker/mappar som är satta av telefontömningsprogramet UFED. 
Det finns flertalet rubriker/mappar som har ett irrelevant innehall for utredningen, dessa rubriker kommer 
att granskas men inte presenteras i genomgangen. 


Fokus for undersökningen ar tidsperioden fran 2020-11-01 till 2021-02-25 dä telefonen togs i beslag. 


Av telefontömningens tidslinje att döma sker ingen aktivitet i telefonen under november och början av 
december utan första aktivitet i telefonen sker 2020-12-27 da ett utgaende Snapchatmeddelande skickas 
fran kontot "mahadmose4211" till "mirettemilaja". Det framstar som tydligt att telefonen tidigare brukats 


av en användare vid namn Pontus Lindstrand. 


3 Premisser 


3.1 Information om enheten 


Den beslagtagna telefonen är av market Apple iPhone X. 


Da telefonen töms pa sitt innehåll ar telefonnummer +46790223662 aktivt i telefonen. 


Inställt Apple ID år por ra nd Q hotmail.com samt pel 1992 e hotmail.com. 


Nedan följer ett utdrag på information om enheten från undersökningsprotokollet. 
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Henrik Norlin, Utredare Grova Brott 


Datum Diarienr Saknr Version 
2023-09-13 5000-K189802-21 01.00 


Device Information 


ega 
Phone Settings 


Message Retention Duration 
Location Services Enabled 


Tethering 
Last Hotspot Activii 
Model number 
Last user ICCID 
Last used MSISDN 


Forever 
True 


2021-02-19 23:28:47(UTC+0 


89462048009065443955 


ICCID 
MSISDN 
Serial 
IMEI 
Unique ID 


+46790223662 
89460140191119029625 


AirDrop ID 
Time Zone 
Apple ID 
iCloud account present 
Advertising Id (IDFA) #1 
Device Name 
Bluetooth device address 
Apple ID 
ICCID 
MSISDN 
IMSI 
OS Version 
Detected Phone Model 
Network Interfaces 
Wi-Fi MAC address 
MAC address 
MAC address 
Bluetooth device address 


373td2e35eced361b8ff2ca4a54ab42071a93345 
89538538f17a 


[por 
= - 


74:9E:AF:7B:71:39 
= = AF:70: = = 
TELTE 
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Följande innehall ar extraherat fran enheten: 


Content 


Data 


ii Activity Sensor Data 200 DI Applications Usa... 11469 BB Calendar © Call Log 


DÉI Cell Towers WW Chats € Contacts d Cookies 


un 
oO 


(7 Device Connectivity 866 L] Device Events 18928 9 Device Locations 60619 Ka Emails 


fö Installed Applications 565 Fa Instant Messages - Log Entries # Notes 


| 


@ Passwords Q Searched Items uy Social Media 3, User Accounts 


A Web Bookmarks © Web History @ Wireless Networks 26271 


i 


Data Files 


== Applications B Archives S Databases 


å Documents B Images 


Rubriker och relevant inneháll fór utredningen redovisas nedan. 


3.2 Telefondata 
3.2.1 Activity Sensor Data 


Under denna rubrik finns det 200 poster. Aktivitet finns registrerad i telefonens hálsoapp fran 
2021-02-12 till 2021-02-25. Det finns bl.a. registrerad aktivitet fór telefonen vid brottstiden 
2021-02-16 kl 17 — 21. Detta visar att telefonen varit i rórelse under timmarna runt tiden fór 


brottet. Dessa timmar redovisas har: 


Telefongenomgang 2021-BG24357-10 , 2023-11-01 14:47 diarienr: 5000-K189802-21 


127 


S Polisen 


Henrik Norlin, Utredare Grova Brott 


Upprättad av 


Dokument 

Telefongenomgäng 

Datum Diarienr 
2023-09-13 5000-K189802-21 


sf HEMLIG | 


Saknr Version 


01.00 


Goto + 


373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Health/healthdb secure.sqlite : Ox6FA64 (Table: 


» Activity Sensor Data 

From: 2021-02-16 17:00:00(UTC « 1) 

To: 2021-02-16 18:00:00(UTC « 1) 

Device name: 

Source: Health 

Total samples count: 2 

Max heartrate: 

Distance Traveled: 25.32 

Flights Climbed: 

Max speed: 

Name: 

Extraction: Legacy 

Manually decoded: False 

Source file: 

objects, samples; Size: 602112 bytes) 
Graph 
Data type 
Total 


@ Distance Traveled @ Steps 


r 


2021-02-16 17:48:16 


Table 


Timestamp 
2/16/2021 5:49:16 PM 


2/16/2021 5:49:16 PM 


Units Value 


Meters 25.32 


Steps 34 
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Upprättad av Datum Diarienr Saknr Version 
Henrik Norlin, Utredare Grova Brott 2023-09-13 5000-K189802-21 01.00 
» Activity Sensor Data Goto - 
From: 2021-02-16 18:00:00(UTC « 1) 
To: 2021-02-16 19:00:00(UTC « 1) 
Device name: 
Source: Health 
Total samples count: 4 
Max heartrate: 
Distance Traveled: 66.35 
Flights Climbed: 
Max speed: 
Name: 
Extraction: Legacy 
Manually decoded: False 
Source file: 373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Health/healthdb secure.sqlite : Ox6FA20 (Table: 
objects, samples; Size: 602112 bytes) 
Graph 
Data type 
Total 


@ Steps — 9 Distance Traveled 


2021-02-16 18:19:00 


Table 


Timestamp 

2/16/2021 6:20:00 PM 
2/16/2021 6:57:28 PM 
2/16/2021 6:20:00 PM 


2/16/2021 6:57:28 PM 


T T T 


2021-02-16 18:29:00 2021-02-16 18:39:00 2021-02-16 18:49:00 
Units Value 
Steps 88 
Steps 9 
Meters 62.3 
Meters 4.05 
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» Activity Sensor Data Goto ~ 

From: 2021-02-16 19:00:00(UTC+1) 

To: 2021-02-16 20:00:00(UTC+1) 

Device name: 

Source: Health 

Total samples count: 9 

Max heartrate: 

Distance Traveled: 8 208.8 

Flights Climbed: 1 

Max speed: 

Name: 

Extraction: Legacy 

Manually decoded: False 

Source file: 373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Health/healthdb secure.sqlite : 0x6F998 (Table: 


objects, samples: Size: 602112 bytes) 


Graph 


Data type 
Total 


@ Steps 


€ Distance Traveled 8 @ Flights Climbed 


r T 


2021-02-16 19:07:45 2021-02-16 19:17:45 


Table 


Timestamp Units Value 
2/16/2021 7:08:45 PM Steps 118 
2/16/2021 7:23:25 PM Steps 101 
2/16/2021 7:45:47 PM Steps 93 
2/16/2021 7:56:13 PM Steps 8 
2/16/2021 7:08:45 PM Meters 77.77 
2/16/2021 7:23:25 PM Meters 68.35 
2/16/2021 7:45:47 PM Meters 57.16 


2/16/2021 7:56:13 PM Meters 5.52 


2/16/2021 7:32:46 PM Floors 1 


T T 


2021-02-16 19:27:45 2021-02-16 19:37:45 2021-02-16 19:47:45 
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» Activity Sensor Data Goto ~ 
From: 2021-02-16 20:00:00(UTC+1) 
To: 2021-02-16 21:00:00(UTC+1) 
Device name: 
Source: Health 
Total samples count: 6 
Max heartrate: 
Distance Traveled: 1493.07 
Flights Climbed: 
Max speed: 
Name: 
Extraction: Legacy 
Manually decoded: False 
Source file: 373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Health/healthdb secure.sqlite : 0x6F866 (Table: objects, samples; 


Size: 602112 bytes) 


Graph 


Data type 
Total 


@ Steps © Distance Traveled 


r 


2021-02-16 20:26:18 


Table 


Timestamp Units Value 
2/16/2021 8:27:18 PM Steps 803 
2/16/2021 8:37:19 PM Steps 988 
2/16/2021 8:47:19 PM Steps 221 
2/16/2021 8:27:18 PM Meters 580.39 
2/16/2021 8:37:19 PM Meters 749.96 


2/16/2021 8:47:19 PM Meters 162.72 


T 


2021-02-16 20:36:18 


T 


2021-02-16 20:46:18 
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3.2.2 Call log 


Under denna rubrik finns det 313 poster. 
Se bilaga 1 till denna genomgång där 47 poster redovisas. 


2020-02-17 finns ett inkommande samtal via Facebook Messenger registrerat till användaren 
”Pontus Biscaard”, vilket är ett konto som brukas av Pontus Lindstrand. Därefter finns inga 
samtal registrerade förrän 2021-02-13 kl 00:34:18 då flera Facetimesamtal med motparten 
”Valentina” sker. 


2021-02-15 kl 13:27:21 och framåt i tid finns ett stort antal utgående och inkommande samtal 
i WhatsApp där brukaren av kontot heter Mahad. 


2021-02-16 kl 14:02:12 finns ett utgående samtal i WhatsApp från Mahad till okänd 
WhatsAppanvåndare (252615192542@s.whatsapp.net). Samtalet varar i 6 min och 51 sek. 


2021-02-18 kl 15:02:21 finns ett utgående samtal till kontakten ”Mamma” med telnr *2241. 
Mahad Alis mamma Hawa Mohamud har i passansökan 2022-12-27 angett detta 
telefonnummer som kontaktuppgift. 


Som Bilaga 1 till denna telefongenomgång biläggs lista över samtalslogg (Call log) där samtliga 
samtal mellan 2021-02-13 och 2021-02-20 redovisas. Därefter redovisas ett antal utvalda 
samtal genom WhatsApp som visar att kontot Mahad fortfarande brukas i telefonen. Likaså 
ett antal samtal med ”Mamma”. 


Sista utgående samtal sker 2021-02-25 kl 09:58:33. Mahad grips 2021-02-25 kl 11.30 enl 
protokoll över frihetsberövandet. 


3.2.3 Contacts (kontaktbok) 


I telefonen finns 1077 kontakter. Bl.a. följande (se även bilaga 1): 

Snapchat-kontakten ”mahadmose”. 

*2241 inlagd som ”Mamma” 2021-02-18 (samma telnr som Mahad Alis mamma angett som 
kontaktnummer vid passansökan 2022-12-27). 

*4713 inlagd som ”Mamma” (enligt DurTvå Rina Arfwidsson, mamma till Pontus Lindstrand). 
*6449 inlagd som ”Valentina” (enligt DurTvå Valentina Hanna f -98, folkbokförd i Grödinge). 


3.2.4 User accounts 


I telefonen finns konton kopplade till Pontus Lindstrand: 
ApplelD: por and e hotmail.com 

iTunes: pel 92 @ hotmail.com 

Hotmail: pon and hotmail.com 

Cloudkit: por and@hotmail.com 

Messages: pel 2 @hotmail.com 


I telefonen finns WhatsApp-konto "Mahad" med User Id: 46790223662 @s.whatsapp.net. 
Instagramkonton: ”mahadmose”, ”orte.n421” samt "pontuslindstrand". 
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Snapchatkonto med namnet ”thugz Mansion Å " och Username: "mahadmose4211". 


| materialet ser det ut att finnas tre instagram konton inloggade pa telefonen, det ena kontot 
år "pontuslindstrand", det andra "mahadmose" och det tredje ett som heter "orte.n421". Alla 
konton ar inloggade och gar därför att växla emellan, se bilder nedan pa den fysiska 
telefonen. 


Se aven bilaga 1. 


6 mahadmose ~ 


12 109 
o Inlägg Följare 


MVWOTW JØNTØG 


Visa översättning 


Redigera profil 


109 Fóljare Lägg till nära vänner 


| AR pontuslindstrand 


orte.n421 


+ Liga till konto 


Å pontuslindstrand ~ Et 


41 173 169 
Inlägg Foljare Följer ` Meddelanden 


GBG 
Bram lägg - 5v 


Ariana Grande 
Tryck om du vill. chatta: 


Khloe Kardashian 
Tryck om du vill chatta 


REHAB HASSAN | ZA bilin, = 
Tryck om du vill chatta 


173 Följare Lagg till nara vanner 


therock 
Tryck om du vill chatta 


ESTA 
å mahadmose | 
á Taylor Swift 


Tryck om du vill chatta 


erte.n421 


Lägg till konto 
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3.2.5 Cell towers 


Under rubriken kontakter finns 6628 poster. Dessa är daterade mellan 2021-02-21 och 2021- 
02-26. Alltsa inga cellpositioner under brottstiden. Innehället bedöms därför sakna betydelse 
för utredningen. 


3.2.6 Device Connectivity 


| telefonen finns 866 poster dä telefonen kopplar upp mot andra enheter. Endast 4 av dessa 
har registrerade tidsstamplar. 


2021-02-16 kl 23:19:38 kopplar telefonen via bluetooth upp mot "Balosaudi". 
2021-02-17 kl 21:04:41 kopplar telefonen via bluetooth upp mot "PASSAT GTR”. 
2021-02-20 kl 16:18:28 kopplar telefonen via bluetooth upp mot "Pins Free” som år ett 
headset. 

2021-02-25 kl 09:54:33 kopplar telefonen via bluetooth upp mot "My Volvo Car”. 


Se bilaga 1. 


3.2.7 Device Events 


Informationen visar händelser pa telefonen, dvs nar displayen öppnas eller stängs, om 
telefonen läses upp eller flygplansläge sätts pa, orienteringen pa skärmen ändras etc. 
Telefonen har lagrat 18928 sädana händelser under tiden frän 2021-02-12 till 2021-02-27 
varav 1169 poster avser 2021-02-16. 


Telefonen hanteras och brukas säledes frekvent under dygnet 2021-02-16. Man kan se ett 
längre uppehäll i aktivitet mellan kl 04:26:24 och kl 09:48:00. | övrigt hanteras telefonen 
frekvent. Den stora mängden data gör att posterna ej biläggs dokumentet. 


3.2.8 Device Location 


Telefonextraktionen visar 60619 poster. Följande poster redovisas och bedöms ha betydelse 
för utredningen: 


2021-02-14 kl 06:04:01 söks i Google Maps i Safari pa en plats som visar sig vara Skanstull i 
Stockholm. | samband med att denna plats visas i telefonen har det gjorts Google-sökningar 
pa just Skanstull. 


2021-02-15. Inga platser med koordinater finns i telefonen for datumet 2021-02-15. Dock 
finns sókningar gjorda i Google Maps pa "eddie jobe”. 


2021-02-16 finns 2 poster. 

Dels fran kl 21:42:05 da det görs en sökning i Google Maps som visar sig vara Tulegatan 14, 
Sundbyberg. Koordinaterna visar en vy fran Streetwiew mot Tuletorget och brottsplatsen i 
detta drende. 

Dels fran kl 22:56:36 dä det görs en sökning pa Booking.com. Koordinaterna visar platsen for 
Quality Hotel Friends vid Friends Arena i Solna, Stockholm. 
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1 
I | 
Ee) | 


a 


eer 


FEN sökningen kl 21:42:05 (Tuletorget). 


2021-02-17 finns fran kl 16:32:23 och framat till 2021-02-27 kl 12:12:59 ett stort antal Device 
locations som positionerar telefonen (27 694 positioner av typen ”visited”). Detta material 
omfattar i tabellform totalt 1849 sidor vilket gor att materialet ligger i sidomaterialet 
(telefontömningen i UFED). De positioner som bedöms vara av vikt for utredningen redovisas 
i kartformat i brukaranalysen avseende Mahad Ali samt i årendesammanstållningen. 


Device locations 2021-02-14 kl 06:04:01 till 2021-02-16 kl 22:56:36 redovisas i bilaga 1. 


3.2.9 Searched Items 


2021-02 14 görs sökningar pa "Skanstull", "Skanstull mc" och "Skanstull öppet nu” under 
morgonen (kl 06:03:18 till kl 06:06:12). Detta pa Google och Google maps. Ett urval visas i 
bilaga 1. 


2021-02-15 under kvällen górs sökningar pa "eddie jobe” och "eddie j" samt "kva saltvik", 
"háktet göteborg”. 


2021-02-16 górs sökningar pa relaterade till "eddie jobe instagram" fram till kl 02:22:29. 
KI 16:42:35 görs sökning pá "Branco - JIGGY (feat.Yasin) (Original)" 


2021-02-18 strax efter midnatt görs sökningar pa Google Maps pa platser kopplade till Oslo 
samt Lilleström, ca 2 mil öster om Oslo, i Norge. 


2021-02-19 kl 13:45:19 görs sökning pa Frivärdskontoret Fridhemsplan i Google Maps. 


3.2.10 Chats 


Under denna rubrik finns 237 poster. 
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Snapchatkonversation mellan kontot i telefonen ”mahadmose4211” och motparten ”Bille”. 
2021-02-25 skickar mahadmose4211 en bild (troligen skärmdump) med en text som handlar 
om Mahad och att han ligger bakom mord i Tynnered. 


Participants (2) 


Bille 
ev 92253ee8-adbe-4d44-87a8-438a8274f5d4 


mahadmose4211 (ovner) 


9 9 Cal0df2d-08df-4a1c-b8fe-96f409f9b03d 


Conversation 


— v Select/Deselect all 9 messages 


mahadmose4211 
e 
0720069501 
021-01-24 01:17:33(UTC+1) 
Sources (2) 
Bill 
ot 
Hj 2021-02-12 21:31:17 (UTC+1) 
Our! 2 
dmo: AU 
maha se42 
E3 2021-02-25 01:20:36(UTC+1) 
Sources (3) 


25 06:10:18(UTC+1) 


a mahadmose4211 [^] 
ES 2021-02-25 06:52:46(UTC+1) 


Sources (2) 
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Version 


01.00 


23:26 ail AG 8 


A Disglisndebort en storanama X 
i Tynnered fran M-falangen 
Mahad kallas for woria G nu 
han har muckat de ar manga i 
Frolunda som ar radda for hans 
namn de ar han som ligger 
bakom alla mord Tynnered 
han ar tjockens hitman han 
satt inne 2ar sen nu nar han 
kom ut de börja hända saker 
de ar säkert han som ligger 
bakom den skjutning i Sthlm 
riktigt fet kille. Dom har sma 
snorungarna i Frölunda suger 
av honom och deras som 
kallade aldre ziad ar livradd for 
honom 


Plus han har manga kontakter 
han sjalv kor över G falangen 
han har gjort sa mkt mer han ar 
kande runt Sverige filterlös kille 
minst han har gjort 10-11 mord 


Skicka meddelande 


Forstoring av den bild som skickas 2021-02-25 kl 01:20:36 fran mahadmose4211. 
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Snapchatkonversation mellan mahadmose4211 och motparten "mirettemilaja". Det fórefaller som att de 
har nägon sorts kärleksrelation. Konversationen har ett innehäll frän 2021-01-16 och fram till att Mahad Ali 
grips 2021-02-25. Samtliga meddelanden redovisas inte dä flera är av privat karaktär och saknar betydelse. 


| konversationen finns inga meddelanden mellan 2021-02-16 kl 11:35:24 och 2021-02-18 kl 01:16:36. 


2021-02-24 kl 18:52:56 skriver "mirettemilaja" ett meddelande med innehället "Mahad abdullahi ali!”. 
Mahadmose4211 svarar med meddelandena ”Mirette Bollstróm" och ”Studievågen 43 vad händer”. 
Mirettemilaja skriver då "Hahahah de meningen att du skulle tro jag va arg för jag sa hela ditt namn ju". 
(Mahad Ali’s, pnr: 961025-0731, fullständigha namn är enl. folkbokföringen Mahad Abdullahi Ali). 


2021-02-24 kl 21:07:17 skriver mahadmose4211 meddelandet ”Äker Oslo baby” och fortsätter beskriva att 
han äker med nägra vänner. 


2021-02-24 kl 23:38:58 skickar mahadmose4211 bild (troligen skarmdump) med en text som handlar om 
Mahad och att han ligger bakom mord i Tynnered. 


2021-02-25 kl 10:00:39 skickar mahadmose4211 ett meddelande: "Hej baby vi àr i gränsen vi fick inte 
komma inn”. Därefter avslutas konversationen. 


Participants (2) 


mirettemilaja 
V S aed38a7a-f7b8-4cb1-bc59-fef2612ea334 


mahadmose4211 (owner) 
> Y cal0df2d-08df-4a1c-b8fe-96f409f9b03d 


Conversation 


= Y Select/Deselect all 221 messages 


e mirettemilaja 


Mahad abdullahi ali! 
ER 2021-02-24 18:52:56(UTC+1) 
Sources (2) 
mahadmose4211 Qe 
Va hahahha 
ER 2021-02-24 18:53:05(UTC+1) 
Sources (2) 
mahadmose4211 a 
Mirette Bollström 
ER 2021-02-24 18:53:20(UTC+1) 
Sources (2) 
mahadmose4211 
Studievágen 43 vad hánder 
ER 2021-02-24 18:53:20(UTC+1) 
Sources (2) 
mir ilaj. 
e ettemilaja 


Hahahahha du är inte rolig att pranka 


e 2021-02-24 18:54:15(UTC+1) 


Sources (2) 
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— Y Select/Deselect all 221 messages 


mirettemilaja 


Hur gàr de baby 


2021-02-24 21:01:13(UTC+1) 


e 


mahadmose4211 


Aker Oslo baby 


B 2021-02-24 21:07:17 (UTC +1) 


Sources (2) 


mirettemilaja 
Nu ? 


EN 2021-02-24 21:07:24(UTC+1) 


mahadmose4211 
Aaa baby 


ER 2021-02-24 21:07:45(UTC+1) 


Sources (2) 


— v Select/Deselect all 221 messages 


A mirettemilaja 


Okii baby , aker du själv ? 
2021-02-24 21:08:12(UTC+1) 
Sources (2) 
mahadmose4211 
Nej med nåra vänner 
ER 2021-02-24 21:08:27(UTC+1) 
Sources (2) 
Q mirettemilaja 
Okii baby kör fórsiktig 
ER 2021-02-24 21:08:58(UTC+1) 
Soul 2 | 
mahadmose4211 
vev 
EX 2021-02-24 21:09:35(UTC+1) 
aA mirettemilaja 
Ar du pavag nu baby 
EN 2021-02-24 21:32:22(UTC+1) 
Sources (2) 
mahadmose4211 
Snart baby 
EN 2021-02-24 21:45:24(UTC+1) 
a mirettemilaja 


Okej älsking , ät innan och köp snacks och dricka till resan Y 


2021-02-24 21:49:17(UTC+1) 


a 


Sources (2) 
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Conversation 


= v Select/Deselect all 221 messages 


ER 2021-02-24 23:49:25(UTC+1) 


Págud assá de barn fasoner 


ER 2021-02-24 23:51:32(UTC+1) 


23:26 ail AG 8 


4,” Deglisnderbost en storanamn X 


i Tynnered frän M-falangen 
Mahad kallas för woria G nu 
han har muckat de ar manga i 
Frölunda som är rädda för hans 
namn de ar han som ligger 
bakom alla mord Tynnered 
han ar tjockens hitman han 
satt inne 2ar sen nu nar han 
kom ut de börja hända saker 
de ar säkert han som ligger 
bakom den skjutning i Sthlm 
riktigt fet kille. Dom har sma 


snorungarna i Frölunda suger 
av honom och deras som 
kallade äldre ziad är livrädd för 
honom 


Plus han har många kontakter 
han själv kör över G falangen 
han har gjort så mkt mer han är 
kände runt Sverige filterlös kille 
minst han har gjort 10-11 mord 


Skicka meddelande 


Förstoring av bild som skickas 2021-02-24 kl 23:38:58. 


ER 2021-02-24 23:38:58(UTC+1) 
Sources (3) 
mahadmose4211 


Horubgar har inget liv 
B 2021-02-24 23:39:32(UTC+1) 


Sources (2 


mahadmose4211 
Inget liv assä haha 


ER 2021-02-24 23:51:09(UTC+1) 
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Conversation 


— v Select/Deselect all 221 messages 


mahadmose4211 


Hej baby vi är i gränsen vi fick inte komma inn 
e 2021-02-25 10:00:39(UTC 1) 
Sources (2) 
a mirettemilaja 
Va ska ni göra nu da baby ? Ska ni aka hem elker vadda 
2n 2021-02-25 10:59:37 (UTC+1) 
Sources (2) 
mahadmose4211 
Aaa baby vi ska åka hem nu snart 
3 2021-02-25 10:59:54(UTC+1) 
Sources (2) 
a mirettemilaja 
Har ni ens sovit baby 
2021-02-25 11:01:31(UTC+1) 
Sources (2) 
mahadmose4211 
Nej bany 
2021-02-25 11:09:44(UTC+1) 
Sources (2) 
3.2.11 Istalled Applications 


Det finns 565 installerade appar i telefonen. Bl.a. följande: 
Booking.com 

Instagram 

Facebook Messenger 

Snapchat 

WhatsApp Messenger 
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Installed Applications (5) 


Purchase Date 
2021-02-13 
14:18:31(UTC+1) 


Application ID 
411EC78F- 
FEFA-4DB4- 


plication/A6680 
F70-9705- 
4D1A-9BA7- 
8190E5273C2D 
ATunesMetadat 


ata/Application/ 
411EC78F- 
FEFA-4DB4- 
91FD- 
406F1081B39A 


Me ler E y Purchase Date 

plication ID: 2021-02-12 
873D9605- 3 20:25:04(UTC+1) 
0739-4887- 


89D4- 
ret 5A18945 


373fd2e35eced 
361b8ff2ca4a5 

4ab4207fa9334 
5_files_full.zip/p 
rivate/var/contai 


=. 
373fd2e35eced 
361b8ff2ca4a5 
4ab4207fa9334 
5_files_full.zip/p 


CDE15A18945 

4/.com.apple.m 
obile_container 
_manager.meta 
data plist ` 0x8B 
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Diarienr 
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Saknr 


Version 


01.00 


Instagram 


Application ID: 
7DCF1696- 
B768-4516- 
96A4- 
AE 


com.burbn.insta 
gram 
Source: 


Version: 174.0 
Mode: 


Foi å 
ieation e 


ytes): 0 
E Yes 
Source file: 
373fd2e35eced 
361b8ff2ca4a5 
4ab4207fa9334 
5 files full.zip/p 
rivate/var/contai 
ners/Bundle/Ap 
plication/9FB75 
013-E56A- 
4C08-B7D1- 
BEEC0C19711 
3/iTunesMetad 
ata.plist : 0x384 
(Size: 1354 
bytes) 
373fd2e35eced 
36 1b8ff2ca4a5 
4ab4207fa9334 
5_files_full.zip/p 
rivate/var/mobil 
e/Containers/D 
ata/Application/ 
7DCF1696- 
B768-4516- 
96A4- 
16CD467E46E 
1/.com.apple.m 
obile_container 
_manager.meta 
data.plist : 0x8B 
(Size: 377 


bytes) 
373fd2e35eced 
361b8ff2ca4a5 
4ab4207fa9334 
5 files full.zip/p 
rivate/var/mobil 
elLibrary/TCCIT 
CC.db-wal : 
0xD8184 
(Table: access; 
Size: 889952 


Purchase Date 
2021-02-12 
20:24:47(UTC+1) 


Microphone 
Camera 
Photos 
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Snapchat 
Application ID: 
77919778- 
DC8B-4FED- 
9F7E 


X B276E89 


com.toyopagro 
up.picaboo 
Source: 


Source file: 
373fd2e35eced 
36 1b8ff2ca4a5 
4ab4207fa9334 
5_files_full.zip/p 
rivate/var/contai 
ners/Bundle/Ap 
plication/4BA20 
511-E741- 
4964-A280- 
4EC38DFF02C 
1/iTunesMetad 
ata.plist : 0x383 
(Size: 1353 
bytes) 
373fd2e35eced 
36 1b8ff2ca4a5 
4ab4207fa9334 
5_files_full.zip/p 
rivate/var/mobil 
e/Containers/D 
ata/Application/ 
77919778- 
DC8B-4FED- 
9F7E- 
0DB1B276E89 
C/.com.apple.m 
obile container 
_manager.meta 
data .plist ` 0x8B 
(Size: 381 


bytes) 
373fd2e35eced 
361b8ff2ca4a5 
4ab4207fa9334 
5 files full.zip/p 
rivate/var/mobil 
elLibrary/TCC/T 
CC.db-wal : 
0xD824D 
(Table: access; 
Size: 889952 
bytes) 

Artifact Family: 


Reposto 
Path: 


Purchase Date 
2021-02-12 
20:24:39(UTC+1) 


Launches 
Activations 

Last Launch 
Active Time 
00:00:00 
Background Time 
00:00:00 


Lifestyle 
ChatApplicatio 
ns 
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WhatsApp 
Messenger 
Application ID: 
1A4881C4- 
D32C-48D0- 
9C4E- 
OFO8D5C89F29 
net.whatsapp. 
WhatsApp 


Foreground 
Application Size 


pas 0 
coded: Yes 
Source file: 


Purchase Date 
2021-02-12 
20:24:18(UTC+1) 
Install Date 

Last Modified 
Deleted Date 


iCloud 
Contacts 
Microphone 
Camera 
Photos 


Launches 
Activations 

Last Launch 
Active Time 
00:00:00 
Background Time 
00:00:00 


Categories 


SocialNetworki 


ng 
ChatApplicatio 
ns 


373fd2e35eced 
361b8ff2ca4a5 
4ab4207fa9334 
5_files_full.zip/p 
rivate/var/contai 
ners/Bundle/Ap 
plication/24461 
249-31D0- 
40C0-BFF1- 
EAB8D37A364 
5/iTunesMetad 
ata.plist : 0x38F 
(Size: 1383 
bytes) 
373fd2e35eced 
36 1b8ff2ca4a5 
4ab4207fa9334 
5_files_full.zip/p 
rivate/var/mobil 
e/Containers/D 
ata/Application/ 
1A4881C4- 
D32C-48D0- 
9C4E- 
OFO8D5C89F29 
/.com.apple.mo 
bile_container_ 
manager.metad 
ata.plist : 0x8B 
(Size: 379 


Source: 


bytes) 
373fd2e35eced 
361b8ff2ca4a5 
4ab4207fa9334 
5_files_full.zip/p 
rivate/var/mobil 
e/Library/TCC/T 
CC.db-wal : 
0xD8006 
(Table: access; 
Size: 889952 
bytes) 

Artifact Family: 
Source 


Repository 
Path: 


3.2.12 
1 anteckning finns. Denna är skapad 2021-02-12 kl 23:48:07 och lyder "4595 kod”. Se bilaga 1. 


Notes 


3.2.13 Web history 


Denna rubrik innehäller 3897 poster. 


Av vikt för utredningen kan nämnas att det gjorts besök pä epost-klienten Outlooks inbox 2021-02-13 
under namnet "E-post — mahad alii — Outlook". 


2021-02-13 kl 19:21:05 har ocksä besók gjorts pa Dropbox dar fórundersókningsprotokollet i ärende 5000- 
K737009-20 avseende ett mord pa Sylvestergatan i Alvsjó 2020-06-20 finns nedladdat. 


2021-02-14 kl 03:29:21 har det gjorts en sókning pa biluppgifter.se pa fordonet JRG240, en bil som i januari 
2021 kopplas till kriminella nätverk i Göteborg. 


Det górs ett antal sókningar pa regnr genom besók pa websidan Biluppgifter.se samt relaterade fragor mot 
registrerade ägare pa merinfo.se. 
2021-02-15 kl 14:58:39 sóks pa JSN49S. 
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2021-02-15 kl 14:59:09 söks pa NHCO77. 
2021-02-15 kl 18:51:04 söks pa CTM45U. 
2021-02-15 kl 19:03:39 söks pa MXP72X. 
2021-02-15 kl 19:46:52 söks pa LLL93L. 


2021-02-16 kl 13:58:39 besöks booking.com med en sökning pä Quality Hotel Friends i Solna. Det 
framkommer att det kl 14:01:02 besöks sista steget i bokningen men det gär inte att utläsa pä 
webhistoriken för vilka datum bokningen besöker sista steget. 


2021-02-16 kl 15:09:39 besöks taxijakt.se. Det gär inte av webhistoriken utröna vilken resa som äsyftas. 


2021-02-16 kl 16:42:35 besöks Youtube där en musikvideo med artikeln Branco - JIGGY (feat. Yasin) 
(Original) visas. 


2021-02-16 kl 18:01:20 besöks Youtube där en musikvideo med artikeln Branco - JIGGY (feat. Yasin) 
(Original) visas. 


2021-02-16 kl 20:24:28 besöks websidan aftonbladet.se med artikel om skottlossning i Sundbyberg med en 
skadad. Artikeln handlar om mordförsöket pä Tuletorget / restaurang Amida. 


2021-02-16 kl 20:30:23 söks websidan flashback pa Google följt av besök i trådarna "aktuella ämnen” och 
"nya ämnen”. 


2021-02-16 kl 21:01:59 besöks ater websidan aftonbladet.se med artikel om skottlossningen i Sundbyberg. 
Artikeln är en uppdaterad version om mordförsöket pä Tuletorget / restaurang Amida. 


2021-02-16 kl 21:04:44 päbörjas en serie besök pa websidan flashback.org som kl 21:05:44 mynnar ut i en 
besók pa tráden "Skottlossning Tulegatan Sundbyberg 16 feb 2021" till kl 21:10:55. 


2021-02-16 kl 21:18:48 besóks aterigen websidan flashback.org och traden "Skottlossning Tulegatan 
Sundbyberg 16 feb 2021" till kl 21:31:15. 


2021-02-16 kl 21:34:05 besóks áterigen websidan flashback.org och tráden "Skottlossning Tulegatan 
Sundbyberg 16 feb 2021" till kl 21:41:45. 


2021-02-16 kl 21:42:05 besóks googlemaps med en streetwiew-bild frán Tulegatan i riktning mot 
Tuletorget. 


2021-02-16 kl 22:02:15 besóks áterigen websidan flashback.org och tráden "Skottlossning Tulegatan 
Sundbyberg 16 feb 2021" till kl 22:08:30. 


2021-02-16 kl 22:08:38 besöks aftonbladets hemsida med artikeln om skottlossning i Sundbyberg till kl 
22:11:00. 


2021-02-16 kl 22:22:19 besóks aftonbladets hemsida med artikeln om skottlossning i Sundbyberg till kl 
22:22:40. 
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2021-02-16 kl 22:22:50 besöks aterigen websidan flashback.org och tráden "Skottlossning Tulegatan 
Sundbyberg 16 feb 2021" till kl 22:23:25. 


2021-02-16 kl 22:23:28 besöks aftonbladets hemsida med artikeln om skottlossning i Sundbyberg till kl 
22:27:45. 


2021-02-16 kl 22:33:25 besóks aterigen websidan flashback.org och tráden "Skottlossning Tulegatan 
Sundbyberg 16 feb 2021" till kl 22:35:35. 


2021-02-16 kl 22:45:38 besöks aftonbladets hemsida med artikeln om skottlossning i Sundbyberg till kl 
22:45:39. 


2021-02-16 kl 22:45:50 besóks áterigen websidan flashback.org och tráden "Skottlossning Tulegatan 
Sundbyberg 16 feb 2021" till kl 22:46:45. 


2021-02-16 kl 22:47:26 besóks aftonbladets hemsida med artikeln om skottlossning i Sundbyberg. 


2021-02-16 kl 22:52:00 besóks áterigen websidan flashback.org och tráden "Skottlossning Tulegatan 
Sundbyberg 16 feb 2021" till kl 22:56:30. 


2021-02-16 kl 22:57:28 besöks aftonbladets hemsida med artikeln om skottlossning i Sundbyberg till kl 
22:58:35. 


Besóken pa websidorna aftonbladet samt flashback med fortsätter vaxelvis fram till 2021-02-17 kl 
02:11:25. 


2021-02-17 kl 11:38:51 besóks áterigen websidan flashback.org och tráden "Skottlossning Tulegatan 
Sundbyberg 16 feb 2021" till kl 11:38:55. 


2021-02-17 kl 15:16:40 besóks áterigen websidan flashback.org och tráden "Skottlossning Tulegatan 
Sundbyberg 16 feb 2021" till kl 15:42:40. 


2021-02-17 kl 17:16:57 besóks áterigen websidan flashback.org och tráden "Skottlossning Tulegatan 
Sundbyberg 16 feb 2021" till kl 17:17:40. 


2021-02-17 kl 17:53:05 besóks áterigen websidan flashback.org och tráden "Skottlossning Tulegatan 
Sundbyberg 16 feb 2021" till kl 18:51:10. 


2021-02-17 kl 20:12:09 besóks booking.com som mynnar ut i en sókning pà Quality Hotel Friends i Solna. 


2021-02-18 kl 00.16.05 pábórjas besók pa Googles websida med sók pa "Oslo" vilket mynnar ut i besók pa 
Oslo - Google Maps fram till kl 00:34:25. 


2021-02-18 kl 04:48:34 besóks áterigen websidan flashback.org och tráden "Skottlossning Tulegatan 
Sundbyberg 16 feb 2021" till kl 05:29:10. 


2021-02-18 kl 16:33:40 besóks áterigen websidan flashback.org och tráden "Skottlossning Tulegatan 
Sundbyberg 16 feb 2021" till kl 16:36:15. 
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2021-02-19 kl 01:19:43 besöks äterigen websidan flashback.org och träden "Skottlossning Tulegatan 
Sundbyberg 16 feb 2021” till kl 01:55:35. 


2021-02-19 kl 02:26:19 besöks biluppgifter.se dar det görs en sökning pa pb TYK689 samt fóljdfrága pa 
ägaren vid tidpunkten i merinfo.se till 02:26:40. Denna person är Kim Mats Bo Nyman. 


2021-02-19 kl 14:11:23 besóks aterigen websidan flashback.org och träden "Skottlossning Tulegatan 
Sundbyberg 16 feb 2021" till kl 14:11:50. 


2021-02-19 kl 14:46:23 till kl 14:48:34 besóks websidan Google Oversatt dar en svensk text matats in for 
översättning till engelska: 


Œ D 8 translate.google.com/?sl=sv&tl=en&text=grabbarna%20ska%20aka%20ditt%20igen%200ch%20knacka%20.. 2 Y OF & 


Google Oversatt Gi 


XA Text m Bilder B Dokument @ Webbplatser 


Identifiera språk svenska engelska spanska v 4 engelska svenska arabiska v 


grabbarna ska áka ditt igen och knacka pá dórren x the boys should go your way again and knock on the yr 
om han ár dár dá ta med honom door if he is there then take him 


+ Menade du: grabbarna ska aka ditigen och knacka pa dörren 
* om han ár dár dá ta med honom 


+ 


Mer information Mer information 


E 


2021-02-19 kl 16:04:23 besóks áterigen websidan flashback.org och tráden "Skottlossning Tulegatan 
Sundbyberg 16 feb 2021" till kl 16:04:35. 


2021-02-20 kl 01:19:57 besóks websidan booking.com med sókning pà Courtyard by Marriott Stockholm 
Kungsholmen. 


2021-02-20 kl 15:13:59 besóks áterigen websidan flashback.org och tráden "Skottlossning Tulegatan 
Sundbyberg 16 feb 2021" till kl 15:41:45. 


2021-02-20 kl 23:07:55 till kl 23:10 24 görs besök pa Google med sökningar på flera olika hotell i 
Stockholmsomrádet. 


2021-02-20 kl 23:31:19 górs besók pà websidan outlook som ár en E-postklient med titeln "E-post — mahad 
alii — Outlook". 


2021-02-21 kl 02:35:39 besóks áterigen websidan flashback.org och tráden "Skottlossning Tulegatan 
Sundbyberg 16 feb 2021" till kl 02:35:45. 


2021-02-21 kl 03:36:19 besóks áterigen websidan flashback.org och tráden "Skottlossning Tulegatan 
Sundbyberg 16 feb 2021" till kl 03:36:35. 
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2021-02-21 kl 03:37:42 besöks websida pa Youtube.com med sókning pa "Efterlyst 2021 skottlyssning 
stundbyberg”. 


2021-02-21 kl 11:10:56 till kl 11:11:18 besöks websidan Google Oversatt dar en svensk text matats in för 
översättning till engelska: 


CO @ translate.google.se/?hl=sv&s|=auto&tl=en&text=guys%20have%20info%20about%20he%20farah%20... € 


Google Oversatt 


X Text m Bilder B Dokument @ Webbplatser 


svenska - identifierat svenska engelska spanska v engelska svenska arabiska v 


guys have info about he farah fick hóra att han och guys have info about he farah was told hat be and 3% 
hans vánner ár i krig mot nárgra andra som bor i his friends are at war with some others who live in 
omárdet mina vánner kánner dessa killar tror att de the omworld my friends know these guys think they 

kan ta fram farah men de är inte 100% leta efter ni can bring out farah but they are not 100% looking for 
ocksa om mer info you too for more info 


Mer information Mer information 


dü dü D Da < 


Skicka feedback 


2021-02-23 kl 01:37:11 till kl 01:39:48 besöks hyrbilsfirman Hertz's websida www.hertz.se. 

2021-02-23 kl 01:40:36 till kl 01:46:20 besöks hyrbilsfirman Sixt’s websida www.sixt.se. 

2021-02-23 kl 03:13:55 till kl 03:22:42 besöks hyrbilsfirman Europcar’s websida www.europcar.com. 
2021-02-23 kl 03:35:37 till kl 03:36:45 besöks hyrbilsfirman Avis’s websida www.avis.se. 

2021-02-25 kl 11:00:47 till kl 11:06:50 besöks hotellbokningssidan booking.com dar man har sökt pa Best 
Western Gustaf Fröding Hotel & Konferens i Karlstad. Det förefaller ocksä som att besöket kl 11:06:42 ar en 


sida med bokningsbekräftelse. 


Se samtliga omnämnda poster i bilaga 1. 


3.2.14 Documents 


Under denna rubrik finns 101 poster. 1 post bedöms vara av betydelse för utredningen: 


2021-02-18 kl 16:34:10 skapades ett dokument i telefonen vilket förefaller vara en skärmdump av en diskussionstrad 
pa websidan flashback.org. diskussionsträden handlar om skottlossningen pa Tuletorget i Sundbyberg. Posten visas i 
bilaga 1 men en förstoring av dokumentet visas har: 
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Henrik Norlin, Utredare Grova Brott 


Dokument 

Telefongenomgang 

Datum Diarienr Saknr 
2023-09-13 5000-K189802-21 


Version 


01.00 


— Logga in v 


flashback 


s 


M 
t 


T 


44 419 online 1 372 441 medlemmar 70 145 737 inlágq 


Swish: 123 536 99 96 


Skottlossning Tulegatan Sundbyberg 16 
feb 2021 


«Svara «= w f « 


Bi Idag, 06:06 + 


Furorem 
Medlem e 


Citat: 
*- Ursprungligen postat av dapravda 
Nágon hár och aftonblaskorna skrev ju att han var i 
30-ársáldern och det år man inte om man år - som 
också någon här skrev - född 1993. Sá mycket kan i 
alla fall jag räkna. 


Är man född 93 så är man 28 i ar. Det vill jag nog pasta är 
i 30-årsåldern. 


< Ø Citera 


B Idag, 06:21 + #134 


2 Reg: Feo 2015 
Eta nickomyra inlagg: 2 199 


Citat: 


< Ursprungligen postat av Tolvan 
För att inte tala om killen precis ovañför, som för 
övrigt förekommer i en del tradar har pa flashback. 


El*as ? | vilka tradar ? 


3 Ø Citera 


Flashback VPN 
Inga loggar-Alltid anonym 
www. flashback. net 


li Idag, 06:35 + #135 
rustamannen koa Pre zoa 
Medlem e É 


Citat: 


+ Ursprungligen postat av Sam.Boyd 
Är inte det där ett hyffsat OK område? 


Sundbyberg är trevligt och lugnt , Storskogen (tuletorget) 
, lilla Alby ‚Duvbo dessa områden är nog lugnaste 
områdena jag bott i Stockholm. Jag har bott på Knivsöder 
och det är värre mkt rån vandalisering ,mer fylla och 
party. 

Stora delar av Sumpan är som östra Östermalm. 

Rissne Hallon Ör lite mer action men lungt i stort sett. 


< ® Citera 
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Bi idag, 10:17 > #136 
— Tolvan EUM 
« Medlem e 2 
Citat: 
** Ursprungligen postat av nickomyra 
El*as ? | vilka tradar ? 
Nej, El"as ar inte precis ovanför VDn, men J*e år. Du kan 
ta och googla. 
< @ Citera 
Bi Idag, 14:06 > #137 
Mediem e 
Inget nytt i media alls .. och vada misstankt 
skottlossning? Hur lang tid tar det att se att det ar fran 
skott ? 
Han verkar ha överlevt , men borde val ändä va en större 
nyhet än en liten notis . Just för att det ändå hände 1930 , 
i ett lugnt omrade pa ett upplyst torg , med massa folk i 
närheten . 
< 9 Citera 
Bi Idag, 15:18 > #138 
Furorem Al 
Medlem & 
Enligt PM ståmmer det att han heter Kim född 93. Han år 
från Göteborg. 
< Ø Citera 
«Svara w f < | < 12v 
Stöd Flashback 
3.2.15 E-mails 
Under denna rubrik finns 59 poster. Mottagande mailadress är pon o o d @hotmail.com. 


Följande mail bedöms vara av betydelse för utredningen: 
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2021-02-12 kl 17:29:03 skickas ett meddelande från Team Snapchat till 
on and@hotmail.com om att någon loggat in på hans konto ”slajfarn” från en Iphone 12: 


» Email 


Account: po and@hotmail.com 

Snippet: [https://storage.googleapis.com/email-media/Hijack_Email_Header.png] Har precis loggat in! Hej slajfarn, det ser ut 
som om nägon loggade in pa ditt konto fran en enhet som heter "iPhone 12" den den 12 februari 2021 kl. 16:29:00 
UTC. Inloggningen skedde nägonstans i närheten av Gothenburg, Sverige (IP = 83.187.176.104). Om detta var du kan 
du bortse fran detta mejl, du behöver inte göra nägot ytterligare. Om det inte var du bör du andra ditt lösenord i 
Snapchat-appen eller pä vär s 

Folder: 194B5D3E-0728-4BB3-A6FD-57D29FEFF145/7 

Subject: Inloggning till Snapchat på den 12 februari 2021 

Timestamp: 2021-02-12 17:29:03(UTC+1) 

Priority: Normal 

Source: Emails 

Status: Read 

Extraction: Legacy 

Source file: 373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope Index : 0x80850 
(Table: messages; Size: 573440 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected Index-wal : 
Ox6FA57 (Table: addresses; Size: 469712 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/194B5D3E-0728-4BB3- 
A6FD-57D29FEFF145/70FB9178-576E-4CAA-A08E-F68D57BFD01E.mbox/Messages/7B4610B1-8033-4CB9- 
B5F9-29C1D5E857F7.emlx : 0x0 (Size: 13695 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope Index-wal : 
0x17F96 (Table: mailboxes; Size: 309032 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected Index : 0xB42B 
(Table: summaries: Size: 106496 bytes) 


From 


From: no reply@snapchat.com Team Snapchat 


To 


To: pof ELLE po and@hotmail.com (owner) 
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2021-02-12 kl 17:37:58 skickas ett meddelande från Team Snapchat till 
on and@hotmail.com om att någon loggat in på hans konto ”pelle.strand” från en Iphone 
12: 


» Email 


Account: pon rand@hotmail.com 

Snippet: [https://storage.googleapis.com/email-media/Hijack_Email_Header.png] Har precis loggat in! Hej pelle.strand, det ser ut 
som om nägon loggade in pa ditt konto fran en enhet som heter "iPhone 12" den den 12 februari 2021 kl. 16:27:56 
UTC. Inloggningen skedde nägonstans i närheten av Gothenburg, Sverige (IP = 83.187.176.104). Om detta var du kan 
du bortse fran detta mejl, du behöver inte göra nagot ytterligare. Om det inte var du bör du andra ditt lösenord i 
Snapchat-appen eller pá v 

Folder: 19485D3E-0728-4BB3-A6FD-57D29FEFF145/7 

Subject: Inloggning till Snapchat pä den 12 februari 2021 

Timestamp: 2021-02-12 17:37:58(UTC+1) 

Priority: Normal 

Source: Emails 

Status: Read 

Extraction: Legacy 

Source file: 373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope Index : 0x808FA 
(Table: messages; Size: 573440 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected Index-wal : 
0x6FA57 (Table: addresses; Size: 469712 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/194B5D3E-0728-4BB3- 
A6FD-57D29FEFF145/70F89178-576E-4CAA-A08E-F68D57BFDOTE.mbox/Messages/CFF986DF-6EC9-4ACD-84E2- 
FACCD907F6FB.emlx : 0x0 (Size: 13694 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope Index-wal : 
0x17F96 (Table: mailboxes; Size: 309032 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected Index : 0xB625 
(Table: summaries; Size: 106496 bytes) 


From 


From: no_reply@snapchat.com Team Snapchat 


To 


To: Pon — hotmail.com por -© hotmail.com (owner) 
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S Polisen Telefongenomgäng sal HEMLIG 


Upprättad av Datum Diarienr Saknr Version 
Henrik Norlin, Utredare Grova Brott 2023-09-13 5000-K189802-21 01.00 


2021-02-12 kl 18:30:45 skickas ett meddelande från Team Snapchats support-mail om en 
inloggningsfråga som pelle.strand ställt: 


» Email 


Account: pon end@hotmaitcom 


Snippet: ##- Please type your reply above this line -## pelle.strand Feb 12, 2021, 5:30 PM UTC Jag har inte mitt nummer eller 
telefon kvar så fórsól in på en ny telefon men lyckas ej. Glömt av vilken e post som år kopplad till detta snap 
konto om det år pon and@hotmailcom <maitto:p "` nd Ohotmailcom> Eller 
por 92 @Hotmail.com <mailto: por 02 @hotmail.com>. Hur kan jag gå tillväga ? Har ju 
användarnamn och lösenord till kontot men kommer ändå ej i 

Folder: 19485D3E-0728-4BB3-A6FD-57D29FEFF145/7 

Subject: Snapchat Support Ticket ID: 139278284 

Timestamp: 2021-02-12 18:30:45(UTC « 1) 

Priority: Normal 

Source: Emails 

Status: Read 

Extraction: Legacy 

Source file: 373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope Index : 0x809A6 
(Table: messages; Size: 573440 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected Index-wal : 
Ox6FA2D (Table: addresses; Size: 469712 bytes) 


373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/194B5D3E-0728-4BB3- 
A6FD-57D29FEFF145/70FB9178-576E-4CAA-A08E-F68D57BFD01E.mbox/Messages/724EF572-6814-4392- 
A266-9220E49C36E7.emlx : 0x0 (Size: 12181 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope Index-wal : 
0x17F96 (Table: mailboxes; Size: 309032 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207£293345 files full.zip/private/var/mobile/Library/Mail/Protected Index : OxB81E 
(Table: summaries; Size: 106496 bytes) 


From 


From: support@snapchat.zendesk.com Team Snapchat 


To 
To: m IIT pelle.strand (owner) 


BCC 


Attachments 


Body [»1) s Text 


##- Please type your reply above this line -## 


pelle.strand 


Jag har inte mitt nummer eller telefon kvar sá fórsóker logga in pá en ny telefon men lyckas ej. 
Glömt av vilken e post som är kopplad till detta snap konto om det ar po and@hotmail.com 


Eller vo 0 hotmail.com. 


Hur kan jag gä tillväga ? 
Har ju anvándarnamn och lósenord till kontot men kommer anda ej in. 


Email header 
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Telefongenomgång 33 


Upprättad av Datum Diarienr Saknr Version 


Henrik Norlin, Utredare Grova Brott 2023-09-13 5000-K189802-21 01.00 


2021-02-12 kl 20:27:25 skickas ett meddelande från Team Snapchat till 
on nd@hotmail.com om att nägon loggat in pa hans konto "slajfarn" fran en enhet som 


heter "iPhone X”: 


» Email 


Account: ro MM nd @hotmail.com 


Snippet: [https://storage.googleapis.com/email-media/Hijack_Email_Header.png] Har precis loggat in! Hej slajfarn, det ser ut 
som om någon loggade in på ditt konto från en enhet som heter "iPhone X" den den 12 februari 2021 kl. 19:27:22 UTC. 
Inloggningen skedde nagonstans i närheten av Gothenburg, Sverige (IP = 90.235.21.247). Om detta var du kan du 
bortse fran detta mejl, du behöver inte göra nagot ytterligare. Om det inte var du bör du andra ditt lösenord i 
Snapchat-appen eller pa var sup 

Folder: 19485D3E-0728-4BB3-A6FD-57D29FEFF145/7 

Subject: Inloggning till Snapchat pa den 12 februari 2021 

Timestamp: 2021-02-12 20:27:25(UTC+1) 

Priority: Normal 

Source: Emails 

Status: Read 

Extraction: Legacy 

Source file: 373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope Index : Ox826FE 
(Table: messages; Size: 573440 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345_files_full.zip/private/var/mobile/Library/Mail/Protected Index-wal : 
0x6FA57 (Table: addresses; Size: 469712 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207£293345 files full.zip/private/var/mobile/Library/Mail/194B5D3E-0728-4BB3- 
A6FD-57D29FEFF145/70F89178-576E-4CAA-AOSE-F68D57BFDO1E.mbox/Messages/572D8F16-1212-40B0- 
B2D5-83EFF31C53E0.emlx : 0x0 (Size: 13518 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207£a93345 files full.zip/private/var/mobile/Library/Mail/Envelope Index-wal : 
0x17F96 (Table: mailboxes; Size: 309032 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected Index : 0x1219A 
(Table: summaries; Size: 106496 bytes) 


From 


From: no reply@snapchat.com Team Snapchat 


To 


To: pole nd O hotmail.com pontuslindstrand@hotmail.com (owner) 
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Telefongenomgång 34 


Upprättad av Datum Diarienr Saknr Version 


Henrik Norlin, Utredare Grova Brott 2023-09-13 5000-K189802-21 01.00 


2021-02-12 kl 20:33:27 skickas ett meddelande från Facebook om en inloggningskod för att logga in 
på Facebook: 


» Email 


Account: m nd @hotmail.com 


Snippet: Hej Pontus! Du kan ange den här inloggningskoden för att logga in på Facebook: 764196 Meddela oss om du inte 
försökte logga in. [https://static.xx.focdn.net/rsrc.php/v3/yP/r/nbIMrq 1jYuK.png] Facebook Hej Pontus! Du kan ange 
den har inloggningskoden för att logga in pa Facebook: 764196 Meddela oss<https://www.facebook.com/login/ 
recover/cancel/?n=764196&id=1517356926&i=iphone_native&cpl=1> om du inte försökte logga in. Det har 
meddelandet har skickats til 

Folder: 194B5D3E-0728-4BB3-A6FD-57D29FEFF145/5 

Subject: 764196 är din kod för att logga in pa Facebook 

Timestamp: 2021-02-12 20:33:27(UTC+1) 

Priority: Normal 

Source: Emails 

Status: Read 

Extraction: Legacy 

Source file: 373fd2e35eced361b8ff2ca4a54ab4207£a93345 files full.zip/private/var/mobile/Library/Mail/Envelope Index : 0x82490 
(Table: messages; Size: 573440 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected Index-wal : 
Ox6F3CF (Table: addresses; Size: 469712 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/194B5D3E-0728-4BB3- 
A6FD-57D29FEFF145/Deleted Items.mbox/Messages/CFA577D1-C676-446C-AED1-E0073A4D1D67.emlx ` 0x0 (Size: 

14248 bytes) 

373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope Index-wal : 
0x180D7 (Table: mailboxes; Size: 309032 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected Index : 0x14C36 
(Table: summaries; Size: 106496 bytes) 


From 


From: security facebookmail.com Facebook 


To 


To: T" nd@hotmail.com Pontus Biscaard (owner) 
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$ Polisen oc sef HEMLIG 


Upprättad av Datum Diarienr Saknr Version 
Henrik Norlin, Utredare Grova Brott 2023-09-13 5000-K189802-21 01.00 


2021-02-12 kl 20:36:03 skickas ett meddelande fran Team Snapchat om att nägon loggat in pa 
"pelle.strand" fran en enhet som heter "iPhone X": 


» Email 


Account: m ` NES 


Snippet: [https://storage.googleapis.com/email-media/Hijack Email Header.png] Har precis loggat in! Hej pelle.strand, det ser ut 
som om någon loggade in på ditt konto från en enhet som heter "iPhone X" den den 12 februari 2021 kl. 19:26:01 UTC. 
Inloggningen skedde nagonstans i nárheten av Gothenburg, Sverige (IP = 90.235.21.247). Om detta var du kan du 
bortse fran detta mejl, du behóver inte góra nagot ytterligare. Om det inte var du bör du andra ditt lösenord i 
Snapchat-appen eller pa var 

Folder: 19485D3E-0728-4BB3-A6FD-57D29FEFF145/7 

Subject: Inloggning till Snapchat pa den 12 februari 2021 

Timestamp: 2021-02-12 20:36:03(UTC- 1) 

Priority: Normal 

Source: Emails 

Status: Read 

Extraction: Legacy 

Source file: 373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope Index : 0x825A8 
(Table: messages; Size: 573440 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected Index-wal : 
0x6FA57 (Table: addresses; Size: 469712 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/194B5D3E-0728-4BB3- 
A6FD-57D29FEFF145/70FB9178-576E-4CAA-AO8E-F68D57BFDO1E.mbox/Messages/6BD5F594-38D0-4FE7-8689- 
A9FE777B23AB.emlx : 0x0 (Size: 13715 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope Index-wal : 
0x17F96 (Table: mailboxes; Size: 309032 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected Index : 0x14A3C 
(Table: summaries; Size: 106496 bytes) 


From 
From: no_reply@snapchat.com Team Snapchat 
To 


To: T 5 EU po =- © hotmail.com (owner) 
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Upprättad av 


Henrik Norlin, Utredare Grova Brott 
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Datum Diarienr 
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36 (46 
01.00 


2021-02-13 kl 11:45:52 skickas ett Digitalt kvitto fran elgiganten.se avseende inbetalning for köp av 
tre mobiltelefoner med abonnemang samt kontantkort i butiken Elgiganten Backebol, Hisingsbacka: 


» Email 


Account: 


Snippet: 


Folder: 


Subject: 


Timestamp: 


Priority: 
Source: 
Status: 
Extraction: 


Source file: 


From 


" nd @hotmail.com 


Basta kund, Tack for att du har valt att 
handla hos Elgiganten Backebol. Enligt 
överenskommelse skickar vi kvittot med e- 
post, sa att du enkelt kan spara det. Har du 
fragor om produkten eller andra 
funderingar, kan du kontakta var 
kundtjänst. Om du har köpt en försäkring 
med din produkt kan du hitta villkoren för 
din köpta produktförsåkring har<https:// 
www.elgiganten.se/cms/forsakring/ 
forsakringsvillkor>. Vänliga hälsningar 
Elgiganten www.elgiganten.se<http:// 
www.elgiganten.se/> 
19485D3E-0728-4BB3- 
A6FD-57D29FEFF145/7 

Digitalt kvitto på ditt inköp 02/13/2021 hos 
Elgiganten Båckebol 

2021-02-13 11:45:52(UTC+1) 


Normal 
Emails 
Read 


Legacy 
373fd2e35eced361b8ff2ca4a54ab4207f 
293345 files full.zip/private/var/ 
mobile/Library/Mail/Envelope Index : 
0x82C60 (Table: messages; Size: 573440 
bytes) 
373fd2e35eced361b8ff2ca4a54ab4207f 
293345 files full.zip/private/var/ 
mobile/Library/Mail/Protected Index- 
wal : Ox6F23E (Table: addresses; Size: 
469712 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207f 
293345 files full.zip/private/var/ 


From: donotreply@elgiganten.se Elgiganten 


To 


To: roll n0 @hotmail.com 2 Ma 


^ 


Inbetalning pà kundorder 


Elgiganten Bäckebol 
Transportgatan 21 
422 04 HISINGEBACKA 


02/13/2021 11:45 AM 
Kvitto. 100044600000961 


Kundnr.: 1632044414 
Namn: Pontus Lindstrand 
E-post: por ESI com 
TLF: H44709394741 
INBETALNING PA KUNDORDER 22301 34934 
10: 1.00 x 234556 iPhone 12 Pra Max - SG smar 
; 1.00 x AMODMOBRTIITIZ Dgiganteri AppleC 
: 1.00 x PRISREDTELE PRISREDUCERING TEL 
" 1 00 x TEMOHOHG24 I ELIA MOBIL DEG 24 
: 1.00 x TEIP12PM1230B TEUA MOBIL OBGB 
. 1.00 x TEDELB10000 TELIA DELBETALNING 
: 1.00 x 268577 Samsung Galaxy A12 amartp 
BA: 1.00 x 268576 Samsung Galaxy A17 smartp 
59: 1.00 x MODMOD12 Trygghetsavtsl - Mobil - 
190: 1.00 x MODMOB12 Trygghetsavtal - Mobil 
110; 1,00 x HALEBOPS TARI Halebop Kontantk 
120: 1.00 x HALEBOPSTART Halcbap Kantantk 
Total på order: 7,801.30 


SUBTOTAL INDETALNING PA KUNDORDER 
AVRUNDNING 


Sum 


Kontant 
Kontant tilbaka 


2230134824 
DAG 


elgiganten.se 


Kassa: SEQ00446 


£801.30 


7,801.30 
-0.30 


7,801.00 


8,000.00 
199.00 
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Uppráttad av Datum Diarienr Saknr Version 
Henrik Norlin, Utredare Grova Brott 2023-09-13 5000-K189802-21 01.00 


2021-02-13 kl 12:45:37 skickas ett digitalt kvitto frán elgiganten.se avseende kóp av mobiltelefon 
iPhone 12 Pro Max dar detaljer om telefonen samt abonnemang for 24 manader ingár: 


por rá @hotmailcom [s] er 


Account: 


Snippet: Båsta kund, Tack för att du har valt att Pontus Lindstrand Kvitto 
handla hos Elgiganten Båckebol. Enligt Fakturanummer 9052783580 
överenskommelse skickar vi kvittot med e- Datum 13.02.2021 
post, så att du enkelt kan spara det. Har du Butik 2037 Elgiganten Båckebol 
peer pa preteen pna Organisationsnummer SE556471447401 
funderingar, kan du kontakta vár 
kundtjänst. Om du har köpt en försäkring Valuta SEK 
med din produkt kan du hitta villkoren fór 
din köpta produktförsäkring har<https:// Direct Delivery Store 
www.elgiganten.se/cms/forsakring/ 
forsakringsvillkor». Vänliga hälsningar Artikel Beskrivning Pris Rabatt Antal Total Moms 
Elgiganten www.elgiganten.se<http:// 234556 iPhone 12 Pro Max - 5G smartphone 128GB 13 790,00 0,00 I 13 790,00 25,00% 
www.elgiganten.se/> (pacific blue) 
Folder: 19485D3E-0728-4BB3- S/N: 
A6FD-57D29FEFF145/7 000351406665912154 
Subject: Digitalt kvitto på ditt inköp 02/13/2021 hos Månadskostnad för detta köp: 1005 kr. då 
Elgiganten Båckebol ingär fria samtal,sms och mms samt 
Timestamp: 2021-02-13 11:45:52(UTC+1) obegränsad surfi 24 månader. 
Priority: Mr AMODMOBTIHEI2  Hgiganten AppleCare stöld 12 man 3 399,00 0,00 1 3 399,00 0,00% 
Source: Emails PRISREDTELE PRISREDUCERING TELECOM -14 636,00 0,00 1 -14 636,00 25,00% 
Status: Read TEMOBOBG24 TELIA MOBIL OBG 24M 0,10 0,00 1 0,10 25,00% 
Extraction: Legacy T noses - 
TEIPT2PM1280B — IELIA MOBILOBGB IPT2PM 128GB 0.10 0,00 1 0,10 25,00% 
Source file: 373fd2e35eced361b8ff2ca4a54ab4207f 
a93345 files full.zip/private/var/ TEDELBI 0000 TELIA DELBETALNING 10000KR 0,10 0,00 1 0,10 25,00% 
mobile/Library/Mail/Envelope Index : 
0x82C60 (Table: messages; Size: 573440 HALEBOPSTART Halebop Kontantkort startpaket 45,00 0,00 1 45,00 25,00% 
bytes) HALEBOPSTART ` Halebop Kontantkort startpaket 45.00 0,00 1 45,00 25,00% 
373fd2e35eced361b8ff2ca4a54ab4207f 
893345 files fullzip/private/var/ Pris Betygsätt Enhet Grundlag Fa 
wärte ee void Total ex. moms -11708,80 SEK 1,00 -11 708,80 
o e E (ble madresses, See Total ex. moms 0,08 SEK 3,00 0,24 
z ytes) : Total ex. moms 36,00 SEK 2,00 72,00 
REITER SEN ces A Total ex. moms 3399,00 SEK 1,00 3 399,00 
293345 files full.zip/private/var/ 
Total ex. moms 11032,00 SEK 1,00 11 032,00 
Moms 25,00 % -755,70 -151,14 
Hom Moms % 3 399.00 0,00 
From: donotreply@elgiganten.se Elgiganten Total ink. moms SEK 2 643,30 
Betalt belopp 7 801,30 
To Aterstaende belopp 0,00 
Betalningsstatus Fullt betald 


To: porf ra @hotmailcom - LI 


ELGIGANTEN ) 
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Uppráttad av Datum Diarienr Saknr Version 
Henrik Norlin, Utredare Grova Brott 2023-09-13 5000-K189802-21 01.00 


2021-02-13 kl 13:06:39 skickas en sákerhetskod Microsoft-teamet fór inloggning pà Microsoftkontot 
Pe*****@hotmail.com: 


» Email 


Account: dB hotmail.com 


Snippet: Microsoft-konto Säkerhetskod Använd följande sákerhetskod för Microsoft-kontot 
Pe*****@hotmail.com<mailto:Pe*****@hotmail.com>. Säkerhetskod: 4072 Om du inte begärde den hår 
koden kan du ignorera det här e-postmeddelandet. Det är möjligt att en annan användare skrev din e- 
postadress av misstag. Tack! Microsoft-kontoteamet 


Folder: 19485D3E-0728-4BB3-A6FD-57D29FEFF145/7 

Subject: Säkerhetskod för Microsoft-konto 

Timestamp: 2021-02-13 13:06:39(UTC+1) 

Priority: Normal 

Source: Emails 

Status: Read 

Extraction: Legacy 

Source file: 373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope 
Index : 0x82A5A (Table: messages; Size: 573440 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected 
Index-wal : Ox6F1D6 (Table: addresses; Size: 469712 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/ 
Mail/194B5D3E-0728-4BB3-A6FD-57D29FEFF145/70FB9178-576E-4CAA-AO8E-F68D57BFDO1E.mbox/ 
Messages/DFED054D-8A3B-400A-BD7B-B0D84E477DE2.emlx : 0x0 (Size: 15464 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope 
Index-wal : 0x17F96 (Table: mailboxes; Size: 309032 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected 
Index : 0x151E7 (Table: summaries; Size: 106496 bytes) 


From 


From: account-security-noreply@accountprotection.microsoft.com Microsoft-kontoteamet 


To 


To: pod @hotmail.com AR ndO hotmail.com (owner) 
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Telefongenomgång 39 


Upprättad av Datum Diarienr Saknr Version 
Henrik Norlin, Utredare Grova Brott 2023-09-13 5000-K189802-21 01.00 


2021-02-13 kl 13:33:45 skickas meddelande från Team Snapchat om att någon loggat in på "pelle.strand"'s 
konto från en enhet som heter ”iPhone 12 Pro Max”: 


» Email 


Account: eT «oo 

Snippet: [https://storage.googleapis.com/email-media/Hijack_Email_Header.png] Har precis loggat in! Hej pelle.strand, det ser ut 
som om nagon loggade in pa ditt konto fran en enhet som heter “iPhone 12 Pro Max" den den 13 februari 2021 kl. 
12:33:43 UTC. Inloggningen skedde nagonstans i narheten av Gothenburg, Sverige (IP = 90.235.4.167). Om detta var du 
kan du bortse fran detta mejl, du behöver inte göra nägot ytterligare. Om detta inte var du bör du andra ditt lösenord i 
Snapchat-appen el 

Folder: 194B5D3E-0728-4BB3-A6FD-57D29FEFF145/7 

Subject: Inloggning till Snapchat pa den 13 februari 2021 

Timestamp: 2021-02-13 13:33:45(UTC+1) 

Priority: Normal 

Source: Emails 

Status: Read 

Extraction: Legacy 

Source file: 373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope Index : 0x829AE 
(Table: messages; Size: 573440 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected Index-wal : 
Ox6F1A0 (Table: addresses, summaries; Size: 469712 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/194B5D3E-0728-4BB3- 
A6FD-57D29FEFF145/70FB9178-576E-4CAA-A08E-F68D57BFD01E.mbox/Messages/3F5A1E33-A16B-4CCE-818E- 
F3242D2662AC.emlx : 0x0 (Size: 13166 bytes) 
373fd2e35eced361 b8ff2ca4a54ab4207fa93345_files_full.zip/private/var/mobile/Library/Mail/Envelope Index-wal : 
0x17F96 (Table: mailboxes; Size: 309032 bytes) 


From 


From: no_reply@snapchat.com Team Snapchat 


To 


To: "ARE m .na@hotmailcom (owner) 
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Upprättad av Datum Diarienr Saknr Version 
Henrik Norlin, Utredare Grova Brott 2023-09-13 5000-K189802-21 01.00 


2021-02-13 kl 13:54:42 skickas ett meddelande fran Instagram om en ny inloggning pa Instagram pa Apple 
iPhone: 


» Email 


Account: >. hi hotmail.com 

Snippet: [https://static.xx.fbcdn.net/rsrc.php/v3/yb/r/QTa-gpOyYBa.png] chttps://www.instagram.com/ n/mainfeed? 
utm campaignzig, suspicious login&utm mediumzemail&target user id=217392203&ndid=5bb36f80022 
e4G24bc2ce7ef644bG5bb37419625b6G9e4» [https://scontent.cdninstagram.com/v/t51.2885-19/ 
5150x150/26157575 144589672917481 297855711394660352 n.jpg] <https://www.instagram.com/_n/ 
user? 
utm campaignczig suspicious login&utm mediumzemail&target user id=217392203&username=pontusli 
ndstrand&ndid-5bb36f80022e4G24 

Folder: 19485D3E-0728-4BB3-A6FD-57D29FEFF145/7 

Subject: Ny inloggning pa Instagram fran Instagram på Apple iPhone 

Timestamp: 2021-02-13 13:54:42(UTC+1) 

Priority: Normal 

Source: Emails 

Status: Read 

Extraction: Legacy 

Source file: 373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope 
Index : 0x82903 (Table: messages; Size: 573440 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected 
Index-wal : 0x6F406 (Table: addresses, summaries: Size: 469712 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/ 
Mail/194B5D3E-0728-48B3-A6FD-57D29FEFF145/70FB9178-576E-ACAA-AO8E-F68D57BFDO1E.mbox/ 
Messages/DF6778E1-05F9-4BE3-A463-47B4298B0B9D.emlx : 0x0 (Size: 18551 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope 
Index-wal : 0x17F96 (Table: mailboxes; Size: 309032 bytes) 


From 


From: security@mail.instagram.com Instagram 


To 


To: pon -nc@hotmail.com m TE (owner) 


Vi har upptáckt en ny inloggning 
pontuslindstrand 


Vi har upptackt en inlo 


Apple iPhone - Instagram - Gothenburg, 
Sweden 


February 13 at 4:54 AM (PDT 
Om det var du kan du ignorera det har 


e-postmeddelandet. Om det inte var du kan du 


sakra ditt konto har 


Las mer om hur du skyddar ditt konto. 
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2021-02-16 kl 00:28:02 skickas meddelande fran TV4 Play om att administrera lösenord på kontot: 


» Email 


Account: dC hotmail.com 


Snippet: [TV4 Play logotype] Glómt ditt lösenord? Ingen fara, vi lóser det. Klicka pá knappen nedan för att válja ett nytt lösenord. 
Har du ett konto pá C More sá gäller ditt nya lösenord även dar. Trevligt tittande TV4 Play Välj nytt lósenord«https:// 
www.tv4play.se/byt- 
losenord/478606A00B0F81800981086807E551016FA5BAA4A61F83BF0D9203122C5D700450D2CD100A3A3E94769F89D 
8559F176A30E6EC08C9664B30> © 2019 TV4 

Folder: 194B5D3E-0728-4BB3-A6FD-57D29FEFF145/7 


Subject: Valj ditt nya l6senord 
Timestamp: 2021-02-16 00:28:02(UTC+1) 
Priority: Normal 

Source: Emails 

Status: Read 

Extraction: Legacy 


Source file: 373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope Index-wal : 
Ox4A571 (Table: messages, mailboxes: Size: 309032 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected Index-wal : 
Ox6F2C2 (Table: addresses, summaries; Size: 469712 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345_files_full.zip/private/var/mobile/Library/Mail/194B5D3E-0728-4BB3- 
A6FD-57D29FEFF145/70FB9178-576E-4CAA-A08E-F68D57BFD01E.mbox/Messages/A8D201EC- 
D067-4B93-8EF4-19C53CD33CCF.emlx : 0x0 (Size: 12923 bytes) 


From 


From: do-not-reply@tv4play.se TV4 Play 


To 


To: DÉI ` nd @hotmail.com pon and@hotmail.com (owner) 
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2021-02-18 kl 00:35:11 skickas meddelande fran Elgiganten med kvitto pa beställning av tva mobiltelefoner 
av märket Samsung: 


» Email 


Account: poll nd hotmail.com 


Snippet: Hej Pontus Lindstrand! Bifogat finner du din kvitto for din bestallning med ordernummer 2230134834, Har du nagra 
fragor gallande din kvitto sa ar du valkommen att kontakta oss. Du hittar vara kontaktuppgifter pa www.elgiganten.se/ 
kontakt. For att vi ska kunna hjälpa dig pa ett så bra sätt som möjligt ber vi dig att uppge ditt kvittonummer vid kontakt 
med oss. Med vanliga halsningar Elgiganten AB 

Folder: 194B5D3E-0728-4BB3-A6FD-57D29FEFF145/7 

Subject: Kvitto 9053017637 

Timestamp: 2021-02-18 00:35:11(UTC+1) 

Priority: Normal 

Source: Emails 

Status: Read 

Extraction: Legacy 

Source file: 373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope Index-wal : 
Ox4A35C (Table: messages, mailboxes; Size: 309032 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected Index-wal : 
0x6F358 (Table: addresses; Size: 469712 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/194B5D3E-0728-4BB3- 
A6FD-57D29FEFF145/70FB9178-576E-4CAA-A08E-F68D57BFD01E.mbox/Messages/6EEE3F5E- 
CDF3-476D-9C7C-6CFBDB308D5F.emlx : 0x0 (Size: 70338 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/194B5D3E-0728-4BB3- 
A6FD-57D29FEFF145/70FB9178-576E-4CAA-A08E-F68D57BFD01E.mbox/Messages/6EEE3F5E- 
CDF3-476D-9C7C-6CFBDB308D5F.emix/Kvitto 9053017637.PDF : (Size: 45743 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected Index : 
0x15E60 (Table: summaries; Size: 106496 bytes) 


From 


From: donotreply@elgiganten.se donotreply@elgiganten.se 


To 


To: DER, ` HEET pontuslindstrand@hotmail.com (owner) 


Av kvittot kan man utläsa att det avser kvitto pa tva Samsungtelefoner som köptes och betalades 2021-02- 
13 kl 11:46:00: 
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El 


DUE: 
D 


Pontus Lindstrand Kvitto 


Fakturanummer 9053017637 
Datum 18.02.2021 
Butik 2037 Elgiganten Backebol 
Organisationsnummer SE556471447401 
Valuta SEK 
Pickup | 
Artikel Beskrivning Pris Rabatt Antal Total Moms 
268577 Samsung Galaxy A12 smartphone 4/64GB 1990,00 0,00 1 1 990,00 25,00% 
(svart) 
S/N: 
R58NC4AZNAH 
Imei: 350396266397452 
Ime i2: 359082626397454 
268576 Samsung Galaxy A12 smartphone 4/64GB 1 990,00 0,00 I 1990,00 25,0096 
(vit) 
S/N: 
R58NCAKSNSD 
Imei:350396266783065 
imci2: 359082626783067 
Pris Betygsatt Enhet Grundlag Summa 
Total ex. moms 1592,00 SEK 2,00 3 184,00 
Moms 25,00 Yo 3 980,00 796,00 
Total ink. moms SEK 3 980,00 
Betalt belopp 7 801,30 
Aterstaende belopp 0,00 
Betalningsstatus Fullt betald 
Betalningsinformation Nöjda kunder är det viktigaste for oss pa Elgiganten! 
Hos oss far du möjligheten att prova det du köpt i 30 
Datum 13.02.2021 dagar. För klubbmedlemmar gäller 50 dagar. 
Tid 11:46:00 UNDANTAG: abonnemang, tjänster, kök, presentkort 
Betalningsmetod CASH och pä köpet erbjudanden. Mobiltelefon, film, spel, 
Betalt belopp SEK 7801,30 programvara och hygienartiklar äterlämnas i obruten 
Referens 329070aa10a74b0888c89dea63 förpackning. Produkten returneras komplett och i 
235ce6-100044600000981 oföråndrat skick. Fullståndiga villkor för öppet köp i en 
Elgiganten Phonehouse butik samt övriga 
Godkånd, behäll ditt kvitto kundgarantier se elgiganten.se/kundgarantier. 


KVITTOT ÅR EN VÄRDEHANDLING och skall 
uppvisas vid retur, garanti- och reklamationsårenden. 


Bankkonto BG 310-6887 
IBAN SE4291900000091953639099 
SWIFT DNBASESX 
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3.2.16 Images 


Under denna rubrik finns 19736 poster. 79 av dessa bilder har extraherats och presenteras i bilaga 2 till 
denna rapport. 


Följande bilder kan omnämnas som av betydelse för utredningen: 


Bild 1. 2021-02-13 kl 18:54:32 skapas en bild visande en hotellbokning i Booking.com med incheckning pä 
Clarion Hotel Stockholm, 13 feb 20201 och utcheckning 15 feb 2021. 


Bild 3. 2021-02-14 kl 16:37:57 skapades en bild pa Mahad Ali. 


Bild 11. 2021-02-15 kl 20:40:31 skapades en bild som visar vad som förefaller vara interiören i en bil där 
láten "Murda Gang" spelas pa Spotify och dar texten "Lyssna pa denna mahad” ar pälagt. 


Bild 12. 2021-02-16 kl 00:35:20 skapades en bild som visar en poserande Kim Nyman. 


Bild 13. 2021-02-16 kl 00:52:55 skapades en bild som förefaller vara en skärmdump pa en facebook-profil 
tillhörande Kim Nymans van Rabi Mousa. 


Bild 14. 2021-02-16 kl 00:52:58 skapades en bild som visar en poserande Kim Nyman. 
Bild 16. 2021-02-16 kl 11:55:46 skapades en bild som förefaller vara en selfie pa Mahad Ali. 


Bild 22. 2021-02-16 kl 23:33:58 skapades en bild med ett foto taget i en bil och med texten "Stockholm" 
tillagt. 


Bild 25. 2021-02-18 kl 16:34:11 skapades en bild som förefaller vara en skärmdump frän hemsidan 
flashback.org med en träd som nämner Kim, född 93, frän Götebrog. 


Bild 29. 2021-02-20 kl 22:58:39 skapades en bild som visar svenska sedlar i kontanter samt vad som 
förefaller vara ett pistolliknande föremäl. 


Bild 31. 2021-02-21 kl 17:47:20 skapades en bild som är ett foto av Mahad Alis pass. 


Bild 32. 2021-02-23 kl 03:16:27 skapas en bild av vad som förefaller vara en skarmdump pa en prisuppgift 
avseende hyrbil pa europcar.com mellan 23 — 28 februari 2021. 


Bild 33. 2021-02-23 kl 03:35:02 skapas en bild av vad som förefaller vara en skärmdump pä en prisuppgift 
avseende hyrbil pa europcar.com mellan 23 — 24 februari 2021. 


Bild 37. 2021-02-23 kl 19:08:51 skapades en bild som är ett foto av Ferdi Kücükgöls pass. 
Bild 38 - 41. 2021-02-23 kl 20:53:51 skapades 4 bilder som är certifikat fran PT provtagning, Birger 


Jarlsgatan 39 i Stockholm för negativa Covid-test beträffande Muhammed Ali, Stefan Aleksic, Mahad Ali 
samt Ferdi Kücükgöl. (Samtliga stoppades tillsammans vid gränsen till Norge (Töckfors) 2021-02-25). 
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Bild 47. 2021-02-24 kl 01:49:41 skapades en bild som förefaller vara en skärmdump frän en chatt-app, 
ursprungligen skarmdumpad vid tidpunkten 18:10 okänt datum. Bilden visar en pistol med magasin samt 
texten "(QKRIGET | GOTEBORG”. 


Bild 49. 2021-02-24 kl 01:49:42 skapades en bild som fórefaller vara en skarmdump fran en chatt-app, 
ursprungligen skármdumpad vid tidpunkten 18:12 okänt datum. Bilden visar texten ”M-Falangen i 
Tynnered leder med 6-2 i kroppar mot G-falangen i Frólunda. Sá tyst nu barn :)". 


Bild 50 - 52. 2021-02-24 kl 02:39:57 skapades 3 bilder som förefaller vara selfies pa Mahad Ali. 


Bild 67. 2021-02-25 kl 03:16:10 skapades en bild som är ett foto pa Mahad Ali som sitter i en bil med en 
cigarett i handen. 


Bild 78. 2021-02-25 kl 11:26:59 skapades en bild som förefaller vara en skärmdump av en bokning pa 
Booking.com med information om att bokningsbekräftelse skickats till mahad a996Qhotmail.com. 
Bekräftelsen visar bekräftelsenummer och PIN-kod. 


3.2.17 Videos 


Under denna rubrik finns 1704 poster. 19 st av dessa redovisas i bilaga 3 med bilder ur videoklippet. En 


kort beskrivning av videofilmer som kan ha intresse för utredningen redovisas här: 


Video 1. 2021-02-14 kl 00:21:00 skapas en video där en kvinna pratar kort och filmar sig själv. | bakgrunden 


liggande pa en sang ligger en mörkhyad man med en telefon i handen. 


Video 3. 2021-02-14 kl 18:10:53 skapas en video dar en man sittande i en bil háller i kameran. | baksätet 


bakom mannen som filmar sitter Mahad Ali. 


Video 4. 2021-02-14 kl 18:30:34 skapas en video där samma man som i video 3 filmar sig själv och där 


Mahad Ali syns i bakgrunden. De förefaller befinna sig pa en restaurang. 


Video 6. 2021-02-16 kl 03:06:32 skapas en video dar Mahad Ali först filmar sin vänstra arm dar han bar en 


klocka som förefaller vara av market Rolex. Därefter filmar han sitt eget ansikte. 


Video 9. 2021-02-22 kl 03:29:49 skapas en video pa 2 sek dar Mahad Ali ligger i en sáng bredvid en tjej. 
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Video 10. 2021-02-24 kl 01:17:13 skapas en video som filmats inne i en bil. Personen som filmar sitter i 


framsätet. | baksätet syns Mahad Ali. 


Video 11. 2021-02-24 kl 01:17:14 skapas en video pa 4 sek dar Mahad Ali syns sitta med en mobiltelefon i 


handen. 


Video 12. 2021-02-24 kl 02:22:45 skapas en video där Mahad Ali syns stä i en lägenhet. Det är inte han som 


filmar. 


Video 18. 2021-02-25 kl 10:01:37 skapas en video pa 9 sek dar en person filmar inne i en bil, pratar in i 
kameran och säger: "Sá att ni vet i alla fall... vi är exakt vid gränsen nu och dom tog alla vara pass och jag 
tror att dom kommer kolla igenom bilen och vi har en atrapp i bilen sa att ni vet ifall att vi torskar...”. Det 
syns 4 personer i bilen. 

Video 19. 2021-02-25 kl 10:01:39 skapas en video pa 9 sek inne i en bil dar personen som filmar har 


munskydd. Man kan se att bilen är en Volvo och att det finns norska polisbilar utanför bilen. 


// krinsp H Norlin 
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C 
£7 Cellebrite 


Extraction Report - Apple iOS Full File system pt sm 
Summary 
Cellebrite Physical Analyzer version 7.64.0.38 
Report creation time 2023-11-01 14:09:03 +01:00 
Time zone settings (UTC) (UTC+01:00) Stockholm (Europe) 
Examiner name Jonathan Brånfeldt 


Source Extraction 


Legacy 
Selected manufacturer Apple 
Selected device name APPLE IOS FULL FILE SYSTEM 
Time zone settings (ID) . Europe/Stockholm 


Plugins 


1 PreProject Cellebrite 2.0 
2 UFED Logical Report Reader Cellebrite 2.0 
Reads the report generated by the UFED 
3 Physical Analyzer Report Reader Cellebrite 2.0 
Reads report generated by the Physical Analyzer 
4 ProjectProcessorFinisher Cellebrite 2.0 
5 PostProject Cellebrite 2.0 
Contents 
= Call Log 65 65 
A Contacts 9 9 
D Device Connectivity 4 4 
9 Locations 7 7 
KA Notes 1 1 
Q Searched Items 11 11 
Ae User Accounts 13 13 
Q Web History 280 280 
k Data Files 1 1 
Bl Documents 1 1 
© Tags 301 391 
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Call Log (65) 


From: 
100046341096779 
Patric Malko 


To: 
1517356926 
Pontus Biscaard 


Direction: 
Incoming 


2020-02-17 
11:29:33(UTC+1) 


00:00:00 


Missed 


Source: Facebook Messenger 
Account: 1517356926 


From: 


+467 ` 49 


Valentina * 


Direction: 
Incoming 


2021-02-13 
00:34:18(UTC+1) 


00:08:41 


Answered 


Network 
Name: 
Unknown 
network 
(Sweden)* 


Yes 


Source: FaceTime 


Yes 


From: 
+467 — Lv 
Valentina * 


Direction: 
Incoming 


2021-02-13 
00:44:50(UTC+1) 


00:49:08 


Answered 


Network 
Name: 
Unknown 
network 
(Sweden)* 


Yes 


Source: FaceTime 


Yes 


To: 
+467 449 
Valentina * 


Direction: 
Outgoing 


2021-02-13 
01:35:54(UTC+1) 


00:01:20 


Answered 


(Sweden)* 


Yes 


Source: FaceTime 


Yes 


From: 
+4674 49 
Valentina * 


Direction: 
Incoming 


2021-02-13 
01:39:43(UTC+1) 


00:26:52 


Answered 


Network 
Name: 
Unknown 
network 
(Sweden)* 


Yes 


Source: FaceTime 


Yes 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 
252615192542@s.what 
sapp.net 


Direction: 
Outgoing 


2021-02-15 
13:27:21(UTC+1) 


00:00:00 


Not 
answered 


Yes 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 
252615245172@s.what 
sapp.net 


Direction: 
Outgoing 


2021-02-15 
13:27:52(UTC+1) 


00:00:00 


Not 
answered 


Yes 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


From: 
+467 449 
Valentina * 


Direction: 
Incoming 


2021-02-16 
00:31:12(UTC+1) 


00:21:24 


Answered 


Network 
Name: 
Unknown 
network 
(Sweden)* 


Yes 


Source: FaceTime 


Yes 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 
252615192542@s.what 
sapp.net 


Direction: 
Outgoing 


2021-02-16 
14:01:58(UTC+1) 


00:00:00 


Not 
answered 


Yes 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


10 


From: 
46790223662@s.whats 
app.net 

Mahad 

T D 


0: 
252615192542@s.what 
sapp.net 


Direction: 
Outgoing 


2021-02-16 
14:02:12(UTC+1) 


00:06:51 


Answered 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


11 


From: 
252615192542@s.what 
Se 


O: 
46790223662@s.whats 
app.net 
Mahad 
Direction: 

Incoming 


2021-02-17 
16:52:39(UTC+1) 


00:00:00 


Missed 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
it 


170 
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From: 
46790223662@s.whats 
app.net 

Mahad 


To: 
252615192542@s.what 
sapp.net 


Direction: 
Outgoing 


2021-02-17 
17:07:29(UTC+1) 


UU:UU:UU 


NOT 
answered 


Source: WhatsApp 
Account: 


HEMLIG”) 
46790223662@s.whatgapf.de- 
t 


13 


From: 


Hen ` 74 @s.whats 
app.net 


les secrets de la vie 


To: 
46790223662@s.whats 
app.net 

Mahad 


Direction: 
Incoming 


2021-02-18 
12:51:56(UTC+1) 


00:00:00 


Missed 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


14 


15 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 
410799085 74 @s.whats 
app.net 

les secrets de la vie 


Direction: 
Outgoing 
From: 


En ` 45 whats 
app.net 
les secrets de la vie 


To: 

46790223662 (9)s.whats 
app.net 

Mahad 


Direction: 
Incoming 


2021-02-18 
14:05:14(UTC+1) 


2021-02-18 
14:13:37(UTC+1) 


00:00:00 


00:02:15 


Rejected 


Answered 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


16 


To: 
0708922241 
Mamma* 


Direction: 
Outgoing 


2021-02-18 
15:02:21(UTC+1) 


00:00:54 


Answered 


Network 
Name: 
Unknown 
network 
(Sweden)* 


Yes 


Source: FaceTime 


Yes 


17 


From: 
40720905 74 @s.whats 
app.net 

les secrets de la vie 


O: 
46790223662@s.whats 
app.net 
Mahad 


Direction: 
Incoming 


2021-02-18 
16:55:22(UTC+1) 


00:00:00 


Missed 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


18 


From: 
46700 9 @s. whats 
app.net 

Valentina 


o: 
46790223662@s.whats 
app.net 
Mahad 


Direction: 
Incoming 


2021-02-19 
02:59:41(UTC+1) 


00:00:00 


Missed 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


Yes 


19 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 

Hen ` o @s.whats 
app.net 

Valentina 


Direction: 
Outgoing 


2021-02-19 
02:59:45(UTC+1) 


00:00:14 


Answered 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


Yes 


20 


From: 


40 ` ` @s. whats 
app.net 


Valentina 


To: 
46790223662@s.whats 
app.net 

Mahad 


Direction: 
Incoming 


2021-02-19 
03:00:01(UTC+1) 


00:08:56 


Answered 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


Yes 


21 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 
252615192542@s.what 
sapp.net 


Direction: 
Outgoing 


2021-02-19 
04:01:21(UTC+1) 


00:00:00 


Not 
answered 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


171 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
2 


From: 


EX ` ` 4 @s. whats 
app.net 
les secrets de la vie 


0: 
46790223662 (9)s.whats 
app.net 
Mahad 


Direction: 
Incoming 


2021-02-19 
13:32:25(UTC+1) 


UU:UU:58 


Answered 


Source: WhatsApp 
Account: 


HEMLIG” 
46790223662@s.whatsapf.de- 
t 


23 


From: 


402298449 @s.whats 
app.net 
Valentina 


To: 
46790223662@s.whats 
app.net 

Mahad 


Direction: 
Incoming 


2021-02-19 
20:14:46(UTC+1) 


00:00:00 


Missed 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


Yes 


24 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 

407298449 @s.whats 
app.net 

Valentina 


Direction: 
Outgoing 


2021-02-19 
20:22:25(UTC+1) 


00:00:00 


Rejected 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


Yes 


25 


26 


From: 


Hen ` ` 9 @s. whats 
app.net 
Valentina 


To: 
46790223662@s.whats 
app.net 

Mahad 


Direction: 
Incoming 


From: 


HEH ` 9 @s. whats 
app.net 
Valentina 


To: 
46790223662@s.whats 
app.net 

Mahad 


Direction: 
Incoming 


2021-02-19 
20:27:33(UTC+1) 


2021-02-19 
23:00:07(UTC+1) 


00:03:38 


00:00:00 


Answered 


Missed 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


Yes 


Yes 


27 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 
402" 9 @s. whats 
app.net 

Valentina 


Direction: 
Outgoing 


2021-02-19 
23:00:47(UTC+1) 


00:10:30 


Answered 


Yes 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
is 


Yes 


28 


From: 


40 ` ` 0 @s.whats 
app.net 


Valentina 


To: 

46790223662 ()s.whats 
app.net 

Mahad 


Direction: 
Incoming 


2021-02-19 
23:11:24(UTC+1) 


00:13:42 


Answered 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


Yes 


29 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 
402" 9 @s. whats 
app.net 

Valentina 


Direction: 
Outgoing 


2021-02-19 
23:58:52(UTC+1) 


00:19:28 


Answered 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


Yes 


30 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 
252615192542@s.what 
sapp.net 


Direction: 
Outgoing 


2021-02-20 
01:45:11(UTC+1) 


00:00:00 


Not 
answered 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


172 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
1 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 
4674 9 @s. whats 
app.net 

Valentina 


Direction: 
Outgoing 


2021-02-20 
02:13:43(UTC+1) 


UU:Z9:37 


Answered 


Source: WhatsApp 
Account: 


„HEMLIG“ 
46790223662@s.whatgapf.de- 
jö 


32 


From: 


ACT 4 25 whats 


app.net 
les secrets de la vie 


To: 

46790223662 (9)s.whats 
app.net 

Mahad 


Direction: 
Incoming 


2021-02-20 
14:50:10(UTC+1) 


00:22:06 


Answered 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


33 


34 


From: 
252615192542@s.what 
sapp.net 


To: 
46790223662@s.whats 
app.net 

Mahad 


Direction: 
Incoming 


From: 
+467 073 
+46 7| O 73* 


Direction: 
Incoming 


2021-02-20 
17:18:33(UTC+1) 


2021-02-21 
04:35:39(UTC+1) 


00:00:00 


05:26:20 


Missed 


Answered 


se 


Network 
Name: 
Unknown 
network 
(Sweden)* 


Yes 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


Source: FaceTime 


Yes 


35 


From: 
46790223662@s.whats 
app.net 


To: 

40 ` ` @s. whats 
app.net 

Valentina 


Direction: 
Outgoing 


2021-02-21 
14:00:28(UTC+1) 


00:11:14 


Answered 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


Yes 


36 


From: 

Hen ` ` 9 @s. whats 
app.net 

Valentina 


O: 
46790223662@s.whats 
app.net 
Mahad 


Direction: 
Incoming 


2021-02-21 
19:26:46(UTC+1) 


00:05:12 


Answered 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


Yes 


37 


To: 
f5b5c135-837d-52b2- 
9e84-bfc8883d4ddd 
Huskooo 


Direction: 
Outgoing 


2021-02-21 
20:24:16(UTC+1) 


00:00:24 


Answered 


Source: Snapchat 


Yes 


38 


To: 
f5b5c135-837d-52b2- 
9e84-bfc8883d4ddd 
Huskooo 


Direction: 
Outgoing 


2021-02-21 
20:25:10(UTC+1) 


00:00:20 


Answered 


Source: Snapchat 


Yes 


39 


From: 
f5b5c135-837d-52b2- 
9e84-bfc8883d4ddd 
Huskooo 


Direction: 
Incoming 


2021-02-21 
20:41:07(UTC+1) 


00:00:09 


Answered 


Source: Snapchat 


Yes 


40 


From: 
8766d802-47ac-5833- 
8c9a-37c360670914 
Mike Milton 


Direction: 
Incoming 


2021-02-21 
20:58:44(UTC+1) 


00:00:10 


Answered 


Source: Snapchat 


Yes 


41 


From: 
ACT 4 @s. whats 
app.net 

les secrets de la vie 


0: 
46790223662 (9)s.whats 
app.net 
Mahad 


Direction: 
Incoming 


2021-02-22 
13:16:06(UTC+1) 


00:00:00 


Missed 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
is 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


From: 


HEH ` 4 0 @s.whats 
app.net 
Valentina 


0: 
46790223662 (9)s.whats 
app.net 
Mahad 


Direction: 
Incoming 


2021-02-22 
16:16:52(UTC+1) 


UU:U7:5T 


Answered 


Source: WhatsApp 
Account: 
46790223662@s.what: 
t 


43 


To: 
0708922241 
Mamma* 


Direction: 
Outgoing 


2021-02-22 
17:29:48(UTC+1) 


00:00:03 


Answered 


Network 
Name: 
Unknown 
network 
(Sweden)* 


Source: 


44 


From: 
0708922241 
Mamma* 


Direction: 
Incoming 


2021-02-22 
18:40:10(UTC+1) 


00:00:00 


Missed 


Network 
Name: 
Unknown 
network 
(Sweden)* 


Source: 


45 


From: 


ACT 9 @s. whats 
app.net 
Valentina 


To: 
46790223662@s.whats 
app.net 

Mahad 


Direction: 
Incoming 


2021-02-23 
12:36:50(UTC+1) 


00:00:00 


Missed 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


46 


From: 


Hen ` ` 9 @s. whats 
app.net 


Valentina 


To: 
46790223662@s.whats 
app.net 

Mahad 


Direction: 
Incoming 


2021-02-23 
12:36:54(UTC+1) 


00:00:00 


Missed 


Yes 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


47 


From: 


Hen ` 4 @s. whats 
app.net 
les secrets de la vie 


To: 
46790223662@s.whats 
app.net 

Mahad 


Direction: 
Incoming 


2021-02-23 
12:40:00(UTC+1) 


00:18:23 


Answered 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


48 


To: 
0708922241 
Mamma* 


Direction: 
Outgoing 


2021-02-23 
13:24:38(UTC+1) 


00:04:34 


Answered 


Network 
Name: 
Unknown 
network 
(Sweden)* 


Source: 


Yes 


49 


From: 
46790223662@s.whats 


To: 

Hen ` ` 9 @s. whats 
app.net 

Valentina 


Direction: 
Outgoing 


2021-02-23 
14:31:35(UTC+1) 


00:02:56 


Answered 


Yes 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


50 


From: 

Hen ` ` @s. whats 
app.net 

Valentina 


O: 
46790223662@s.whats 
app.net 
Mahad 


Direction: 
Incoming 


2021-02-23 
16:59:25(UTC+1) 


00:01:26 


Answered 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


51 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 

46449 @s.whats 
app.net 

Valentina 


Direction: 
Outgoing 


2021-02-23 
17:26:28(UTC+1) 


00:00:00 


Rejected 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


52 


From: 


ACT 9 @s. whats 
app.net 
Valentina 


O: 
46790223662@s.whats 
app.net 
Mahad 


Direction: 
Incoming 


2021-02-23 
17:36:49(UTC+1) 


00:04:32 


Answered 


Yes 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 500! 


802-21 


From: 


En ` ` | @s. whats 
app.net 
+46M 91 


0: 
46790223662 (9)s.whats 
app.net 
Mahad 


Direction: 
Incoming 


2021-02-23 
18:01:51(UTC+1) 


UU:UU-ZT 


0-K189 


Answered 


Source: WhatsApp 
Account: 
46790223662 (9)s.what 
t 


54 


From: 

46790223662 (9)s.whats 
app.net 

Mahad 


To: 

Hen ` | @s.whats 
app.net 

+46 79 049 97 91 


Direction: 
Outgoing 


2021-02-23 
18:02:44(UTC+1) 


00:01:25 


Answered 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


55 


From: 


Hen ` ` ` Os.whats 
app.net 


To: 
46790223662@s.whats 
app.net 

Mahad 


Direction: 
Incoming 


From: 


ACT 9 @s.whats 
app.net 
Valentina 


To: 
46790223662@s.whats 
app.net 

Mahad 


Direction: 
Incoming 


2021-02-23 
19:44:54(UTC+1) 


2021-02-23 
20:33:06(UTC+1) 


00:01:45 


00:00:00 


Answered 


Missed 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 

Hen ` ` 9 @s. whats 
app.net 

Valentina 


Direction: 
Outgoing 


2021-02-23 
20:34:38(UTC+1) 


00:06:43 


Answered 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


To: 
0708922241 
Mamma* 


Direction: 
Outgoing 


2021-02-24 
15:52:35(UTC+1) 


00:00:00 


Not 
answered 


Network 
Name: 
Unknown 
network 
(Sweden)* 


Source: 


From: 
0708922241 
Mamma* 


Direction: 
Incoming 


2021-02-24 
15:52:53(UTC+1) 


00:01:02 


Answered 


(Sweden)* 


From: 
0708922241 
Mamma* 


Direction: 
Incoming 


2021-02-25 
14:31:32(UTC+1) 


00:00:00 


Network 
Name: 
Unknown 
network 
(Sweden)* 


Source: 


From: 
m ` 0 
Valentina * 


Direction: 
Incoming 


2021-02-25 
22:02:20(UTC+1) 


00:00:00 


Missed 


Network 
Name: 
Unknown 
network 
(Sweden)* 


Valentina * 


Direction: 
Incoming 


2021-02-25 
22:02:42(UTC+1) 


00:00:00 


Missed 


Network 
Name: 
Unknown 
network 
(Sweden)* 


From: 


We 0 


Valentina * 


Direction: 
Incoming 


2021-02-25 
22:02:57(UTC+1) 


00:00:00 


Missed 


Network 
Name: 
Unknown 
network 
(Sweden)* 


From: 

HS ` ` 4 @s.whats 
app.net 

les secrets de la vie 


0: 
46790223662 (9)s.whats 
app.net 

Mahad 


Direction: 
Incoming 


2021-02-26 
14:08:33(UTC+1) 


00:00:00 


Missed 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


From: 
(ye ` 4 O 
Valentina * 


Direction: 
Incoming 


2021-02-26 
15:19:55(UTC+1) 


00:00:00 


Missed 


(Sweden)* 


Source: 
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175 


Contacts (9) 


Contact Timestamp Entries Addresses Notes Additional info Deleted 
Name: Mahadmose User ID: 
Group: friends Username 
Source: Snapchat mahadmose 
Name: Mamma User ID: 
Source: WhatsApp Id EOCBEC65-53BD- 
Account: 41D2-A588- 
46790223662@s.wh 0327229C0BB4:ABPe 
atsapp.net rson 
WhatsApp User Id 
46709394713@s.what 
sapp.net 


Name: Mamma Phone: 
Source: Recents +46708922241 
Name: Mamma Created: User ID: 
2021-02-12 User ID EOCBEC65- 
23:47:30(UTC+1) 53BD-41D2-A588- 
0327229C0BB4:ABPe 
Modified: pu 
2021-02-12 
23:47:30(UTC+1) Phone: 
Home - 40M 3 
Name: Mamma Created: User ID: InteractionC: incoming 
2021-02-18 User ID CCC77607- interaction count: 1 
14:52:48(UTC+1) 0E41-4712-8E21- InteractionC: incoming 
E88C235BC482:ABPe interaction count: 5 
fiad: rson ` InteractionC: outgoing 
Med a Identifier interaction count: 5 
.E9- +46708922241 
14:52:50(UTC+1) 
Phone: 
Home 0708922241 
Name: taxijakt Created: User ID: InteractionC: incoming 
Source: InteractionC | 2021-02-13 Identifier interaction count: 2 
10:08:56(UTC+1) +4682945258 
Name: Valentina User ID: About: Busy. 
Source: WhatsApp Id A2BA5034-E50E- 
Account: 4D41-995D- 
46790223662@s.wh 05A839046DA8 
atsapp.net WhatsApp User Id 
Photos: 46704336449@s.what 
46| 9- sapp.net 
1596298864 jpg Push Name V 
Phone: 
Home +4C 9 
Name: Valentina Phone: 
Source: Recents +46704336449 
Name: Valentina Created: User ID: InteractionC: incoming 
2021-02-17 User ID A2BA5034- interaction count: 6 
00:47:24(UTC+1) E50E-4D41-995D- InteractionC: incoming 
05A839046DA8 interaction count: 17 
Gad: InteractionC: outgoing 
Modified: ... Phone: interaction count: 117 
00:47:24(UTC+1) Home -400 ` o 
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Device Connectivity (4) 
# Device Name Device type Start time Connectivity Device Identifiers | Additional info Source Deleted e | 
method 
1 Balosaudi Unknown 2021-02-16 Bluetooth Address: Artifact Family: Source: D 
23:19:38 Connectivity 9C:DF:03:BD:34:4F Service Identifier: 
nature: 
Source 
Detected Repository Path: 
2 PASSAT GTR Unknown 2021-02-17 Bluetooth Address: Artifact Family: Source: O 
21:04:41 Connectivity 30:C3:D9:37:8E:86 Service Identifier: 
nature: 
Source 
Detected Repository Path: 
3 Pins Free Headset 2021-02-20 Bluetooth Address: Artifact Family: Source: o 
16:18:28 Connectivity F4:4E:FC:A5:22:1F Service Identifier: 
nature: 
Source 
Detected Repository Path: 
4 My Volvo Car Unknown 2021-02-25 Bluetooth Address: Artifact Family: | Source: O 
09:54:33 Connectivity 58:16:D7:4E:3D:51 Service Identifier: 
nature: 
Source 
Detected Repository Path: 
GPS 
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Locations (7) @ open in Google Earth Open in Google Maps HEMLIG 


1 (59.307625, 18.076355) Description: Skanstull o 


Time: 2021-02-14 06:04:01(UTC+1) 
Source: Safari 
Service Identifier: 


2 (59.364926, 17.974430) Time: 2021-02-16 21:42:05(UTC+1) o 
Source: Safari 
Service Identifier: 


3 (59.372415, 18.003369) Description: Quality Hotel Friends, Searched o 
Solna, Stockholms làn, Sverige 


Name: Quality Hotel Friends 


Time: 2021-02-16 22:56:36(UTC+1) 
Source: Booking.com 
Service Identifier: 


4 Description: eddie jobe o 


Time: 2021-02-15 21:06:55(UTC+1) 
Source: KnowledgeC 
Service Identifier: 


5 Description: eddie jobe o 


Time: 2021-02-15 21:06:56(UTC+1) 
Source: Safari 
Service Identifier: 


6 Description: eddie jobe D 


Time: 2021-02-15 21:06:56(UTC+1) 
Source: Safari 
Service Identifier: 


7 Description: eddie jobe o 


Time: 2021-02-15 21:07:00(UTC+1) 
Source: Safari 
Service Identifier: 


Notes (1) 
1 Created: Title: 4595 kod Account: 127B225E-BD11-4F92-8B8E- > 
2021-02-12 Source: Notes D9FB6F76198A 
23:48:07 (UTC1) Labels: 
Modified: Body: 4595 kod 
2021-02-12 Parties: 


23:48:11(UTC+1) 


10 
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Searched Items (11) 


1 2021-02-14 Safari skanstull Unknown e 
06:03:18(UTC+1) 
2 2021-02-14 Safari Skanstull Unknown e 
06:03:28(UTC+1) Position: 
(59.307625, 
18.076355) 
3 2021-02-14 Safari Skanstull, 118 60 Unknown o 
06:03:29(UTC+1) Stockholm 
Position: 
(59.307625, 
18.076355) 
4 2021-02-14 Safari skanstull mc Unknown E: 
06:04:34(UTC+1) 
5 2021-02-14 Safari skanstull öppet nu Unknown D 
06:05:21(UTC+1) 
6 2021-02-14 Safari skanstull 6ppet nu Unknown D 
06:06:12(UTC+1) 
7 2021-02-15 Safari eddie jobe Unknown D 
19:40:25(UTC+1) 
8 2021-02-15 Safari eddie j Unknown E: 
19:40:42(UTC+1) 
9 2021-02-15 Safari kva saltvik Unknown E: 
22:07:06(UTC+1) 
10 [2021-02-15 Safari háktet góteborg Unknown e 
22:21:03(UTC+1) 
11 2021-02-15 KnowledgeC häktet göteborg Unknown e 
22:21:20(UTC+1) adre 


User Accounts (13) 


1 


Creation time 
2021-02-12 
19:41:54(UTC+1) 
Username: 


Porn: nd @hotmail.com 


Service Type: 127B225E-BD11- 
4F92-8B8E-D9FB6F76198A 


Source: Accounts 


Account 
Description: 
iCloud 


Creation time 
2021-02-12 
19:41:49(UTC+1) 
Username: 


pel? Qhotmail.com 


Service Type: D581A404-FE94- 
4D08-B346-B1FDFDDB3B28 


Source: Accounts 


Account 
Description: 
Device Locator 


Creation time 
2021-02-12 
19:41:54(UTC+1) 
Username: 


Porn: nd @hotmail.com 


Service Type: 02464211-FB70- 
4808-BOA7-ACF6A2DB3AED 


Source: Accounts 


Account 
Description: 
IDMS 


Creation time 
2021-02-12 
19:41:55(UTC+1) 
Username: 


pon nd @hotmail.com 


Service Type: D83321D7-ABAA- 
4C9C-A534-E66312D63A13 


Source: Accounts 


Account 
Description: 
Apple ID 


11 
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179 


pel 92 O hotmail.com 


Service Type: D315EB44-93E4- 
410A-8F11-E6059076BEA9 


Source: Accounts 


Creation time ee E t 
19:52:23(UTC+1) iTunes S Pal. MLI 
Username: 


6 Creation time Account 
2021-02-12 Description: 
20:13:29(UTC+1) Hotmail 
Username: 
pon d @hotmail.com 
Service Type: 194B5D3E-0728- 
4BB3-AGFD-57D29FEFF 145 
Source: Accounts 

7 Creation time Account. 
2021-02-12 Description: 
20:22:16(UTC+1) Cloudkit 
Username: 
po nd @hotmail.com 
Service Type: 5A38667F-6D4A- 
4473-A0E0-3228A4316934 
Source: Accounts 

8 Creation time Account. 
2021-02-12 Description: 
20:24:08(UTC+1) Messages 
Username: 
pel 92 O hotmail.com 
Service Type: 4CF534D4-7C44- 
4CEF-8B7A-68066A03D28E 
Source: Accounts 

9 Creation time User ID: About: Hallá 
Account Name: Mahad WhatsApp User Id dar! Jag 

46790223662@s.whatsapp.net anvander 
WhatsApp. 
Source: WhatsApp PP 

10 | Creation time User ID: Biography: M.VD.T JM 
Username: mahadmose Instagram Id 1050949595 TG 
Account Name: mahadmose Profile Picture: 

Photo Url https://scontent-arn2- 
1.cdninstagram.com/v/t51.2885- 
Source: Instagram 19/s150x150/28157231 2072532 
109628182 85813638129621401 
. ; 6 njpg? nc ht=scontent-arn2- 
Photos: pnetot jbg 1.cdninstagram.com& nc ohc=Y 
9DJFUZFUW4AX8UnoUj8tp=180 
h=013c3c0201712afc7e26fa97b7 
e160cd&0e=606189B5 

11 | Creation time User ID: 

Username: orte.n421 Instagram Id 45995202971 

Account Name: orte.n421 Profile Picture: 
Photo Url https://scontent-sea1- 
1.cdninstagram.com/v/t51.2885- 

Source: Instagram 19/44884218 345707102882519 
_2446069589734326272_n.jpg?_ 

a nc_ht=scontent-sea1- 

E 1.cdninstagram.com&_nc_ohc=8 
AUoZNYMP5IAX- 
Y52pR&oh=1d23d094e49f5d216e 
0d1859269337d1&0e=605FE68F 
&ig cache keyzYWb5vbnltb3VzX3 
Byb2ZpbGVfcGlj.2 

12 | Creation time User ID: 


Username: pontuslindstrand 


Account Name: Pontus 
Lindstrand 


Source: Instagram 


Photos: photo1.jpg 


Instagram Id 217392203 


Profile Picture: 

Photo Url https://scontent-arn2- 
1.cdninstagram.com/v/t51.2885- 
19/5150x150/26157575 1445896 
72917481 297855711394660352 
_n.jpg?_nc_ht=scontent-arn2- 
1.cdninstagram.com&_nc_ohc=1s 
YY_cqW97oAX- 
IHxvu&tp=1&0h=eb7b2c44f296f8 
304adb5666f1c0064a&0e=60607 
013 


12 


aga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


Bil 
13 


Creation time 


Username: mahadmose4211 
Account Name: thugz Mansiond 


Source: Snapchat 


180 


User ID: 
96f409f9b03d 


Email: 
Email Address 


Phone: 
Mobile Phone Number 
+46793349073 


User ID ca10df2d-08df-4a1c-b8fe- 


mahad_a496@hotmail.com 


Birthday: 1996-10-24 
22:00:00(UTC+0) 


Web History (280) 


# Title URL Last Visited | Visits po Additional info | Source Info Deleted 
attern 
1 E-post - mahad |https://outlook.live.com/mail/0/inbox/id/AQQKk | 2021-02-13 1 Artifact Family: | Source: Safari 
alii - Outlook ADAwATYWMAItZjlyADKtMGUyNCOWMAItM | 14:22:19(UTC Account: 
DAKABAASNWMNvVXEMEyZp9zOPic70Q% | +1) Source Service 
0, H H 
3D%3D Repository Path: Identifier: 
2 E-post - mahad |https://outlook.live.com/mail/O/inbox/id/AQQk | 2021-02-13 1 Artifact Family: | Source: Safari 
alii - Outlook ADAwATYWMAItZjlyADkKtMGUyNCOWMAItM | 14:22:19(UTC Account: 
DAKABAASNWMNvXEMEyZp9zOPic70Q% | +1) Source Service 
0, H e 
3D%3D/ Repository Path: Identifier: 
3 E-post - mahad | https://outlook.live.com/mail/0/inbox/id/AQQk | 2021-02-13 Artifact Family: Source: 
alii - Outlook ` |ADAWATYWMAItZjlyADktMGUyNCOwMAILtM | 14:22:20(UTC KnowledgeC 
DAKABAASNWMNVXEMEyZp9zOPic70Q% | +1) Account: 
3D%3D/ Source Service 
Repository Path: Bar. 
Identifier: 
4 E-post - mahad | https://outlook.live.com/mail/O/inbox 2021-02-13 1 Artifact Family: | Source: Safari 
alii - Outlook 14:22:26(UTC Account: 
*1) Source Service 
Repository Path: | 'dentifier: 
5 E-post - mahad |https://outlook.live.com/mail/0/inbox/id/AQQk | 2021-02-13 1 Artifact Family: | Source: Safari 
alii - Outlook  [ADAwATYwMAItZjlyADktMGUyNCOwWMAItM | 14:22:32(UTC Account: 
DAKABAASNWMNvXEMEyZp9zOPic70Q% | +1) Source Service 
0, H H 
3D%3D Repository Path: Identifier: 
6 E-post - mahad |https://outlook.live.com/mail/0/inbox/id/AQQk | 2021-02-13 1 Artifact Family: | Source: Safari 
alii - Outlook | ADAWATYWMAItZjlyADktMGUyNCOWMAItM | 14:22:32(UTC Account: 
DAKABAASNWMNvXEMEyZp9zOPic70Q% | +1) Source Service 
0, H = 
3D%3D/ Repository Path: Identifier: 
7 E-post - mahad | https://outlook.live.com/mail/0/compose/AQM | 2021-02-13 1 Artifact Family: | Source: Safari 
alii - Outlook kADAwATYwMAItZjlyADktMGUyNCOWMAIt | 14:22:34(UTC Account: 
MDAKAEYAAAOOkSSikJG6RJgf5v73jwSYB | +1) s Service 
wAM2nzdDOHET4FpPFPhZi3BAAACAQ8A Repository Path: | Identifier: 
AAAM2nzdDOHET4FpPFPhZi3BAAQi4vpvA SPOS LGTY eau): 
AAA 
8 E-post - mahad | https://outlook.live.com/mail/0/compose/AQM | 2021-02-13 Artifact Family: Source: 
alii - Outlook —|kKADAWATYWMAItZjlyADktMGUyNCOWMAIt | 14:22:35(UTC KnowledgeC 
MDAKAEYAAAOOKkS5ikJG6RJgf5v73iwSYB | +1) S Account: 
wAM2nzdDOHET4FpPFPhZi3BAAACAQ8A Repository Path: | Service 
AAAM2nzdDOHET4FpPFPhZi3BAAQi4vpvA epository Fath: | identifier: 
AAA 
9 E-post - mahad | https://outlook.live.com/mail/0/inbox/id/AQQk | 2021-02-13 1 Artifact Family: | Source: Safari 
alii - Outlook ` | ADAWATYwMAItZjlyADktMGUyNCOWMAItM | 14:22:38(UTC Account: 
DAKABAASNWMNvXEMEyZp9zOPic70Q% | +1) Service 
3D%3D Source Identifier: 
Repository Path: 8 
10 E-post - mahad |https://outlook.live.com/mail/0/inbox 2021-02-13 1 Artifact Family: | Source: Safari 
alii - Outlook 14:22:42(UTC Account: 
+1) Source Service 
Repository Path: | Identifier: 
11 E-post - mahad |https://outlook.live.com/mail/0/inbox/id/AQQk | 2021-02-13 1 Artifact Family: | Source: Safari 
alii - Outlook | ADAwATYWMAItZjlyADKtMGUyNCOWMAItM | 14:34:07(UTC Account: 
DAKABAASNWMNvXEMEyZp9zOPic70Q% | +1) Source Service 
0, H H 
3D%3D Repository Path: Identifier: 
12 E-post - mahad | https://outlook.live.com/mail/O/inbox 2021-02-13 1 Artifact Family: | Source: Safari 
alii - Outlook 14:34:08(UTC Account: 
+1) Source Service 
Repository Path: | Identifier: 
13 E-post - mahad | https://outlook.live.com/mail/0/inbox 2021-02-13 Artifact Family: Source: 
alii - Outlook 14:34:15(UTC KnowledgeC 
+1) Source Account: 
; . | Service 
Repository Path: Identifier: 
14 E-post - mahad |https://outlook.live.com/mail/O/inbox/id/AQQk | 2021-02-13 1 Artifact Family: | Source: Safari 
alii - Outlook ADAwATYWMAItZjlyADKtMGUyNCOWMAItM | 14:34:56(UTC Account: 
DAKABAASNWMNvXEMEyZp9zOPic70Q% | +1) Source Service 
0, H e 
3D%3D Repository Path: Identifier: 
15 E-post - mahad |https://outlook.live.com/mail/0/inbox/id/AQQk | 2021-02-13 1 Artifact Family: | Source: Safari 
alii - Outlook [ADAwATYwMAItZjlyADktMGUyNCOwWMAItM | 14:34:56(UTC Account: 
DAKABAASNWMNvXEMEyZp9zOPic70Q% | +1) Source Service 
0, H H 
3D%3D/ Repository Path: Identifier: 
16 E-post - mahad | https://outlook.live.com/mail/0/compose/AQM | 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook kADAWATYwMAItZjlyADktMGUyNCOWMAIt 14:35:00(UTC Account: 
MDAKAEYAAAO0KSSIkJGERJgf5V73jwSYB | +1) S Service 
wAM2nzdDOHET4FpPFPhZi3BAAACAQ8A Repository Path: | Identifier: 
AAAM2nzdDOHET4FpPFPhZi3BAAQi4vpw epository Path: 


AAAA 
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E-post- nüps:/Ouuook.Iive.com/mall/U/InDOX/Ta/AUIUK | 2021-02-13 Artract Family: — | Source: pata t 
alii - Outlook —. | ADAWATYWMAItZjlyADktMGUyNCOWMAItM | 14:35:03(UTC Account HEMLI 
DAKABAASNWMNvXEMEyZp9zOPic70Q% | +1) S Service 
3D%3D Source . | Identifier: 
Repository Path: 
18 E-post - mahad | https://outlook.live.com/mail/0/inbox 2021-02-13 Artifact Family: Source: Safari S 
alii - Outlook 14:35:05(UTC Account: 
+1) Source Service 
Repository Path: | Identifier: 
19 E-post - mahad | https://outlook.live.com/mail/0/inbox/id/AQQk | 2021-02-13 Artifact Family: | Source: Safari o 
alii - Outlook | ADAWATYWMAItZjIyADKtMGUyNCOWMAItM | 14:35:09(UTC Account: 
DAKABAASNWMNvXEMEyZp9zOPic70Q% | +1) Source Service 
0, H H 
3D%3D Repository Path: Identifier: 
20  |E-post - mahad |https://outlook.live.com/mail/0/compose/AQM | 2021-02-13 Artifact Family: | Source: Safari o 
alii - Outlook kADAwATYWMAItZjlIyADKtMGUyNCOWwMAIt | 14:35:14(UTC Account: 
MDAKAEYAAAOOKSSIkKJGGRJgfSv73jwSYB | +1) S Service 
wAM2nzdDOHET4FpPFPhZi3BAAACAQ8A parce h: | Identifier: 
AAAM2nzdDOHETA4FpPFPhZi3BAAQi4vpxA Repository Path: 


E-post - mahad 
alii - Outlook 


AAA 


https://outlook.live.com/mail/O/inbox/id/AQQk 
ADAWATYwMAItZjlyADktMGUyNCOWMAItM 
DAKABAASNWMNvXEMEyZp9zOPic70Q% 
3D%3D 


2021-02-13 
14:35:16(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


E-post - mahad 
alii - Outlook 


https://outlook.live.com/mail/0/compose/AQM 
kADAWATYwMAItZjlyADktMGUyNCOwMAIt 
MDAKAEYAAAOOKS5ikJG6RJgf5v73jwSYB 
wAM2nzdDOHET4FpPFPhZi3BAAACAQ8A 
AAAM2nzdDOHET4F pPFPhZi3BAAQi4vpyA 
AAA 


2021-02-13 


14:35:30(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


E-post - mahad 
alii - Outlook 


E-post - mahad 
alii - Outlook 


E-post - mahad 
alii - Outlook 


https://outlook.live.com/mail/0/inbox/id/AQQk 
ADAWATYwMAItZjlyADktMGUyNCOwMAItM 
DAKABAASNWMNvXEMEyZp9zOPic70Q% 
3D%3D 


https://outlook.live.com/mail/O/inbox 


https://outlook.live.com/mail/O/inbox/id/AQQk 
ADAWATYwMAItZjlyADktMGUyNCOwMAItM 
DAKABAASNWMNvXEMEyZp9zOPic70Q% 
3D%3D 


2021-02-13 
14:35:40(UTC 
+1) 


2021-02-13 


14:35:44(UTC 
+1) 


2021-02-13 
14:35:46(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Artifact Family: 


Source 


Repository Path: 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Source: Safari 
Account: 
Service 
Identifier: 


Source: Safari 
Account: 
Service 
Identifier: 


E-post - mahad 
alii - Outlook 


https://outlook.live.com/mail/0/compose/AQM 
kADAWATYwMAItZjlyADktMGUyNCOwMAIt 
MDAKAEYAAAOOkSSikJG6RJgf5v73jwSYB 
wAM2nzdDOHET4FpPFPhZi3BAAACAQ8A 
AAAM2nzdDOHET4F pPFPhZi3BAAQi4vpzA 
AAA 


2021-02-13 
14:35:54(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


E-post - mahad 
alii - Outlook 


E-post - mahad 
alii - Outlook 


https://outlook.live.com/mail/0/inbox/id/AQQk 
ADAWATYwMAItZjlyADktMGUyNCOwMAItM 
DAKABAASNWMNvXEMEyZp9zOPic70Q% 
3D%3D 


https://outlook.live.com/mail/O/inbox 


2021-02-13 
14:35:59(UTC 
*1) 


2021-02-13 
14:36:02(UTC 
*1) 


Artifact Family: 


Source 


Repository Path: 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Source: Safari 
Account: 
Service 
Identifier: 


E-post - mahad 
alii - Outlook 


https://outlook.live.com/mail/0/inbox/id/AQQk 
ADAWATYwMAItZjlyADktMGUyNCOwMAItM 
DAKABAA5NWMNvXEMEyZp9zOPic70Q% 
3D%3D 


2021-02-13 
14:39:04(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


E-post - mahad 
alii - Outlook 


https://outlook.live.com/mail/0/compose/AQM 
kADAWATYwMAItZjlyADktMGUyNCOwMAIt 
MDAKAEYAAAOOKS5ikJG6RJgf5v73jwSYB 
wAM2nzdDOHET4FpPFPhZi3BAAACAQ8A 
AAAM2nzdDOHET4F pPFPhZi3BAAQi4vp0A 
AAA 


2021-02-13 
14:39:10(UTC 
*1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


E-post - mahad 
alii - Outlook 


E-post - mahad 
alii - Outlook 


https://outlook.live.com/mail/O/inbox/id/AQQk 
ADAWATYwMAItZjlyADktMGUyNCOwMAItM 
DAKABAA5NWMNvXEMEyZp9zOPic70Q% 
3D%3D 


https://outlook.live.com/mail/O/inbox 


2021-02-13 


14:39:28(UTC 
*1) 


2021-02-13 
14:39:32(UTC 
*1) 


Artifact Family: 


Source 


Repository Path: 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Source: Safari 
Account: 
Service 
Identifier: 


Dropbox - 
Fórundersókni 
ngsprotokoll — 
Fórenkla ditt liv 


https://www.dropbox.com/sh/dejwsl48x6dg1a 
z/AADhLYrUBhuxBTDxALly_PnZa?dl=0 


2021-02-13 
19:21:05(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


2019 
Mercedes- 
Benz A 200, 
Svart / 163hk 
pa 
Biluppgifter.se 


https://biluppgifter.se/fordon/JRG240 


2021-02-14 
03:29:21(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


35 2020 Volvo https://biluppgifter.se/fordon/JSN49S 2021-02-15 Artifact Family: | Source: Safari o 
AND: D4 14:58:39(UTC Account: 
6 +1) S Service 
Å ource Pr 
Morkorup / Repository Path: Identifier: 
Biluppgifter.se 
36 2018 Nissan https://biluppgifter.se/fordon/NHC077 2021-02-15 Artifact Family: | Source: Safari o 
oe 14:59:09(UTC Account: 
-T, Rö +1) Service 
116hk pa Source 
Biluppgifter. se Repository Path: | Identifier: 
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a llego 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 182 
vu nupsz7/bimppgrier.se/Toraon/u TIViZzou 021-02-15 T Artiract Family: Source: pata E: 
olkswagen 18:51:04(UTC Account 
Passat, Svart / +1) | Source Service HEMLI 
190hk pa ñ ifier: 
Bilupp difter.se Repository Path: | Identifier: 
38 2021 https://biluppgifter.se/fordon/MXP72X 2021-02-15 1 Artifact Family: | Source: Safari o 
>; 19:03:39(UTC Account: 
enz +1 Service 
DE, Mörkblå / Source . | Identifier: 
194hk pa Repository Path: 
Biluppgifter.se 
39 Quality Hotel  |https://www.booking.com/hotel/se/quality- 2021-02-16 1 Artifact Family: | Source: Safari o 
Friends i Solna |friends.sv.html?label-gen173nr- 13:58:39(UTC Account: 
— uppdaterade |1FCAEoggl46AdIM1gEaMgBiAECmAEIuAE | +1) S Service 
priser för 2021 | HYAEN2AEB6AEB-AELIiAIBgAIDuAK3gq- Repoatt Path: | Identifier: 
BBsACAdICJDFiNDFjYzg1LWM5MWYtNGM COS at 
zZ805MmMOLWFKkZmIzZDNmMzMyMNgCB 
uACAQ&sid-cb602dccc0a7647ccb33ac1440 
501f9a&all sr blocks-54686601 23091344 
0 0 1 0%2C54686601 230913440 0 1 0 
&checkin=2021-02-18&checkout=2021-02- 
21&dest_id=- 
2522526&dest type=city&group adults=4&g 
roup children=0&hapos=1&highlighted bloc 
ks-54686601 230913440 0 1 0%2C54686 
601 230913440 0 1 O&hpos-1&no rooms 
=2&req_adults=4&req_children=0&room1=A 
%2CA&room2=A%2CA&sr_order=popularity 
&srepoch=1613480313&srpvid=e8ae5b3ce2 
dd006e&ucfs=1&matching block id=546866 
01 230913440 O 1 O&srhp=1&ref is wl 
40 Booking.com: |https://secure.booking.com/book.html 2021-02-16 1 Artifact Family: | Source: Safari o 
Sista steget 14:01:02(UTC Account: 
+1) Source Service 
Repository Path: | Identifier: 
41 Taxi | Boka taxi | https://taxijakt.se/ 2021-02-16 1 Artifact Family: | Source: Safari o 
online S SE 15:09:39(UTC Account: 
ast pris +1) Source Service 
Taxijakt.se Repository Path: Identifier: 
42 Branco - https://www.google.se/search?q=Branco+- | 2021-02-16 1 Artifact Family: | Source: Safari o 
JIGGY (feat. +JIGGY (feat.+Yasin)+(Original)&ie=UTF- 16:42:35(UTC Account: 
Yasin) 8&oe-UTF-8&hl-sv-se&client-safari +1) Sour Service 
(Original) - Sök Repository Path: | Identifier: 
pa Google epository Path: 
43 Branco - https://www.google.se/search?q=Branco+- | 2021-02-16 1 Artifact Family: | Source: Safari o 
JIGGY (feat. +JIGGY (feat.+Yasin)+(Original)&ie=UTF- 16:42:36(UTC Account: 
Yasin) 8&oe-UTF-8&hl-sv-se&client-safari *1) S Service 
(Original) - Sök ource . | Identifier: 
pa Google Repository Path: 
44 YouTube https://m.youtube.com/watch?v=BFPfiVfiG44 | 2021-02-16 1 Artifact Family: | Source: Safari o 
16:42:39(UTC Account: 
*1) Service 
Source Identifier: 


Branco Ft 
Yasin - JIGGY 
(Official Lyrics) 
- YouTube 


https://m.youtube.com/watch?v=BFPfiVfiG44 


2021-02-16 
16:42:39(UTC 
+1) 


Repository Path: 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Branco Ft 
Yasin - JIGGY 
(Official Lyrics) 
- YouTube 


https://m.youtube.com/watch?v=BFPfiVfiG44 


2021-02-16 
16:42:45(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Branco Ft 
Yasin - JIGGY 
(Official Lyrics) 
- YouTube 


https://m.youtube.com/watch?v=BFPfiVfiG44 


2021-02-16 
18:01:20(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Skottlossning i 
Sundbyberg — 
en skadad | 
Aftonbladet 


https://www.aftonbladet.se/senastenytt/a/7K 
mLkB/en-skadad-efter-misstankt- 
skottlossning 


2021-02-16 


20:24:28(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


flashback - Sök 
pa Google 


https://www.google.se/search?q-flashback&i 
e=UTF-8&0e=UTF-8&hl=sv-se&client=safari 


2021-02-16 
20:30:23(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


50 flashback - Sök | https://www.google.se/search?q=flashback&i | 2021-02-16 1 Artifact Family: | Source: Safari o 
pa Google e-UTF-8&oe-UTF-8&hl-sv-se&client-safari | 20:30:24(UTC Account: 
*1) Source Service 
Repository Path: | Identifier: 
51 Flashback https://www.flashback.org/ 2021-02-16 1 Artifact Family: | Source: Safari o 
Feum, ihel 20:30:26(UTC Account: 
randefrihe +1) Service 
Ne Source far 
på riktigt! Repository Path: Identifier: 
52 Flashback https://www.flashback.org/aktuella-amnen 2021-02-16 1 Artifact Family: Source: Safari o 
Forum - 20:30:30(UTC Account: 
uella +1) S Service 
Å ource at, 
amnen Repository Path: Identifier: 
53 Flashback https://www.flashback.org/aktuella-amnen 2021-02-16 Artifact Family: | Source: o 
Forum - 20:30:35(UTC KnowledgeC 
ella : 
ámnen = Source Servos. 
Repository Path: Identifier: 
54 Flashback https://www.flashback.org/nya-amnen 2021-02-16 1 Artifact Family: | Source: Safari o 
Forum - Nya 20:30:44(UTC Account: 
ámnen +1) Service 
Source Identifier: 


Repository Path: 
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NIPS77WWWTTasnDack.orgmya-amnen 021-02-16 Artiract Family: | Source: Cs 
Forum - Nya 20:30:45(UTC Knowledge] E M LI 
ämnen +1) Source Account 

` . | Service 
Repository Path: Identifier: 

56 Flashback https://www.flashback.org/aktuella-amnen 2021-02-16 Artifact Family: | Source: Safari o 
oa S 20:30:50(UTC Account: 

uella +1) Service 
amnen Source Identifier: 


Skottlossning i 
Sundbyberg — 
en skadad 
Aftonbladet 


Skottlossning i 
Sundbyberg — 
en skadad 
Aftonbladet 


https://www.aftonbladet.se/senastenytt/a/7K 
mLkB/man-skadad-efter-misstankt- 
skottlossning 


https://www.aftonbladet.se/senastenytt/a/7K 
mLkB/man-skadad-efter-misstankt- 
skottlossning 


2021-02-16 
21:01:59(UTC 
+1) 


2021-02-16 
21:02:00(UTC 
+1) 


Repository Path: 


Artifact Family: 


Source 


Repository Path: 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Source: Safari 
Account: 
Service 
Identifier: 


Skottlossning i 
Sundbyberg — 
en skadad 
Aftonbladet 


Flashback 
Forum | 
Yttrandefrihet 
pa riktigt! 


https://www.aftonbladet.se/senastenytt/a/7K 
mLkB/man-skadad-efter-misstankt- 
skottlossning 


https://www.flashback.org/ 


2021-02-16 
21:02:05(UTC 
+1) 


2021-02-16 
21:04:44(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Artifact Family: 


Source 


Repository Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Source: Safari 
Account: 
Service 
Identifier: 


Flashback 
Forum - 
Aktuella 
ámnen 


https://www.flashback.org/aktuella-amnen 


2021-02-16 
21:04:49(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Flashback 
Forum - 
Aktuella 
ámnen 


Flashback 
Forum - Nya 
ámnen 


https://www.flashback.org/aktuella-amnen 


https://www.flashback.org/nya-amnen 


2021-02-16 
21:04:50(UTC 
+1) 


2021-02-16 
21:05:34(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Artifact Family: 


Source 


Repository Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Source: Safari 
Account: 
Service 
Identifier: 


Taggsök 


https://www.flashback.org/search_tags.php 


2021-02-16 
21:05:37(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Flashback 
Forum - Nya 
inlagg 


https://www.flashback.org/nya-inlagg 


2021-02-16 
21:05:39(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - 
Flashback 
Forum 


https://www.flashback.org/t3305870 


2021-02-16 
21:05:44(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - 
Sidan 2 - 
Flashback 
Forum 


https://www.flashback.org/t3305870p2 


2021-02-16 
21:05:50(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - 
Flashback 
Forum 


https://www.flashback.org/t3305870 


2021-02-16 
21:05:51(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - 
Flashback 
Forum 


https://www.flashback.org/t3305870 


2021-02-16 
21:05:55(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - 
Sidan 2 - 
Flashback 
Forum 


https://www.flashback.org/t3305870p2 


2021-02-16 
21:07:47(UTC 


+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - 
Sidan 2 - 
Flashback 
Forum 


https://www.flashback.org/t3305870p2 


2021-02-16 
21:07:50(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - 
Sidan 2 - 
Flashback 
Forum 


https://www.flashback.org/t3305870p2 


2021-02-16 
21:10:55(UTC 
*1) 


Artifact Family: 


Source 


Repository Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Flashback 
Forum | 
Yttrandefrihet 
pa riktigt! 


https://www.flashback.org/ 


2021-02-16 
21:18:48(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


a us 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
[FlasnbacK — | 


184 


IHüps7WWW-Tasnpack.orgmya-mnragg 021-02-16 Artiract Family: | Source: Bata e 
Forum - Nya 21:18:52(UTC Account HEM LI 
e a Source  |Sericel 
Repository Path: E 
74 Skottlossning |https://www.flashback.org/t3305870 2021-02-16 Artifact Family: | Source: Safari o 
en 16 21:18:55(UTC Account: 
undbyberg +1) Source ervice 
feb 2021 - ` . | Identifier: 
Flashback Repository Path: 
Forum 
76 Skottlossning |https://www.flashback.org/t3305870p3 2021-02-16 Artifact Family: | Source: Safari o 
ee arn pa 21:18:58(UTC Account 
undbyberg +1) Source ervice 
feb 2021 - i ifier: 
Sidan 3. Repository Path: | Identifier. 
Flashback 
Forum 
77 Skottlossning  |https://www.flashback.org/t3305870p3 2021-02-16 Artifact Family: | Source: o 
Tulegatan 21:19:00(UTC KnowledgeC 
Sundbyberg 16 +1) Source Account 
z ` . | Service 
Sidan 3 - Repository Path: | Identifier: 
Flashback 
Forum 


Du lamnar nu 


https://www.flashback.org/leave.php?u=https 


2021-02-16 


Artifact Family: 


Source: Safari 


Flashback %3A%2F%2Fwww.aftonbladet.se%2Fsenast | 21:19:51(UTC Account: 
Forum enytt%2Fa%2F7KmLkB%2Fman-skadad- +1) Source Service 
efter-misstankt-skottlossning Repository Path: Identifier: 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg - | mLkB/man-skadad-efter-misstankt- 21:31:09(UTC Account: 
en skadad | skottlossning *1) Source Service 
Aftonbladet Repository Path: Identifier: 
Skottlossning i | https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: 
Sundbyberg — | mLkB/man-skadad-efter-misstankt- 21:31:15(UTC KnowledgeC 
en skadad | skottlossning +1) Source Account: 
Aftonbladet : i 
onblade Repository Path: dl 

81 Skottlossning |https://www.flashback.org/t3305870p3 2021-02-16 Artifact Family: | Source: o 
Tulegatan 21:34:05(UTC KnowledgeC 
Sundbyberg 16 +1) Source Aneru 

eb 2021 - f . | Service 
Sidan 3 - Repository Path: | Identifier: 
Flashback 

Forum 

82 Skottlossning |https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: | Source: Safari o 

Du 21:34:44(UTC an 
undbyberg 16 +1) Source ervice 
EN 2 i Repository Path: | Identifier: 

Flashback 
Forum 

83 Skottlossning |https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: | Source: EN 
Tulegatan 21:34:50(UTC KnowledgeC 
Sundbyberg 16 +1) Source Account: 

eb 2021 - ` . | Service 
Sidan 4 - Repository Fath: Identifier: 
Flashback 

Forum 

84 Skottlossning |https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: | Source: o 
Tulegatan 21:41:45(UTC KnowledgeC 
Sundbyberg 16 *1) Source Account: 
feb 2021 - Repository Path: | Service 
Sidan 4 - H ry * | Identifier: 

Flashback 
Forum 

85 Du lämnar nu |https://www.flashback.org/leave.php?u-https | 2021-02-16 Artifact Family: | Source: Safari o 
Flashback %3A%2F %2Fgoo.gl%2Fmaps%2FUVSXVG | 21:42:03(UTC Account: 

Forum qxsjkbXNKA9 *1) Saure Service 
` . | Identifier: 
Repository Path: 
86 https://goo.gl/maps/UVsXVGqxsjkbXNKA9 | 2021-02-16 Artifact Family: | Source: Safari o 
21:42:05(UTC Piae 
*1) Source ervice 
Repository Path: | Identifier: 

87 https://www.google.se/maps/@59.3649269,1 | 2021-02-16 Artifact Family: | Source: Safari o 
7.97443,3a,75y,356.4h,96.44t/data=!3m6!1e | 21:42:05(UTC Account: 
1!3m4!1sD2qsM9e_FlwhOhTS8JvOFA!2e0!7 | +1) Serres Service 
i 18i 2 = ifier: 
11638418i8192?shorturl=1 Repository Path: Identifier: 

88 Skottlossning |https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: | Source: O 
Tulegatan 22:02:15(UTC KnowledgeC i 
Sundbyberg 16 +1) Source Account: 
feb 2021 - Repository Path: Service 
Sidan 4 - pository Fat: | identifier: 

Flashback 
Forum 

89 Skottlossning |https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: | Source: o 
Tulegatan 22:03:00(UTC KnowledgeC 
Sundbyberg 16 *1) Source: Account: 
feb 2021 - Repository Path: Service 
Sidan 4 - P y * | Identifier: 

Flashback 
Forum 

90 Skottlossning |https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: | Source: o 
Tulegatan 22:03:25(UTC KnowledgeC 
Sundbyberg 16 +1) Source Account: 
feb 2021 - Repository Path: Service 
Sidan 4 - pository Fath: | identifier: 

Flashback 
Forum 


17 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
T å g 


[NUIPS77WWW.TASNDACK.OTg/T33U587 UP -T6 Arüract Family: 
Tulegatan 22:08:10(UTC 
Sundbyberg 16 +1) S 
EC Repository Path: 
Sidan 4 pository Fath: | identifier: 
ashbac| 
Forum 

92 Skottlossning |https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: | Source: 
Tulegatan 22:08:30(UTC KnowledgeC 
Sundbyberg 16 +1) S Account: 
feb 2021 - ue i 

Repository Path: | Service 
Sidan 4 S pository Fath: | identifier: 
ashbac| 
Forum 

93 Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg - | mLkB/man-skadad-efter-misstankt- 22:08:38(UTC Account: 
en skadad skottlossning *1) Source Service 
Aftonbladet Repository Path: Identifier: 

94 Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg - | mLkB/man-skadad-efter-misstankt- 22:08:38(UTC Account: 
en skadad skottlossning +1) S Service 
Aftonbladet Repository Path: Identifier: 

95 Skottlossning i | https:/Awww.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg - |mLkB/man-skadad-efter-misstankt- 22:09:17 (UTC Account: 
en skadad skottlossning +1) S Service 
Aftonbladet Repository, Path: | Identifier: 

96 Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: 
Sundbyberg - | mLkB/man-skadad-efter-misstankt- 22:09:20(UTC KnowledgeC 
en skadad skottlossning +1) S Account: 
Aftonbladet eu . | Service 

Repository Path: Identifier: 

97 Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg - |mLkB/man-skadad-efter-misstankt- 22:10:56(UTC Account: 
en skadad | Skottlossning *1) S Service 
Aftonbladet EE Path: | Identifier: 

98 Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: 
Sundbyberg - |mLkB/man-skadad-efter-misstankt- 22:11:00(UTC KnowledgeC 
en skadad | Skottlossning *1) S Account: 
Aftonbladet ource . | Service 

Repository Path: Identifier: 

99 Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg - |mLkB/man-skadad-efter-misstankt- 22:22:19(UTC Account: 
en skadad skottlossning +1) S Service 
Aftonbladet ERC Path: | Identifier: 

100  |Skottlossningi |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg - |mLkB/man-skadad-efter-misstankt- 22:22:19(UTC Account: 
en skadad skottlossning *1) S Service 
Aftonbladet Repository. Path: Identifier: 

101  |Skottlossningi |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg - | mLkB/man-skadad-efter-misstankt- 22:22:38(UTC Account: 
en skadad skottlossning *1) Source Service 
Aftonbladet Repository Path: | Identifier: 

102  |Skottlossningi |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: 
Sundbyberg - | mLkB/man-skadad-efter-misstankt- 22:22:40(UTC KnowledgeC 
en skadad skottlossning +1) S Account: 
Aftonbladet owce . | Service 

Repository Path: Identifier: 
103 |Skottlossning  |https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: | Source: 
Tulegatan 22:22:50(UTC KnowledgeC 
Sundbyberg 16 +1) S Account: 
feb 2021 - ource i 
Repository Path: | Service 

Sidang k * | Identifier: 
ashbac| 

Forum 

104 rang https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: | Source: Safari 

ulegatan 22:23:01(UTC Account: 

Sundbyberg 16 *1) Source Service 

ps nn E Repository Path: Identifier: 

Flashback 

Forum 

105  |Skottlossning  |https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: | Source: 
Tulegatan 22:23:05(UTC KnowledgeC 
Sundbyberg 16 +1) S Account: 
feb 2021 - ource i 

, Repository Path: Service 
pidan 4 y * | Identifier: 
ashbac| 
Forum 

106  |Skottlossning  |https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: | Source: 
Tulegatan 22:23:25(UTC KnowledgeC 
Sundbyberg 16 +1) S Account: 
feb 2021 - ource i 

Repository Path: | Service 
an si y * | Identifier: 
ashbac| 
Forum 

107  |Skottlossningi | https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg - | mLkB/man-skadad-efter-misstankt- 22:23:28(UTC Account: 
en skadad | Skottlossning *1) Source Service 
Aftonbladet Repository Path: Identifier: 

108  |Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: 
Sundbyberg — |mLkB/man-skadad-efter-misstankt- 22:23:30 (UTC KnowledgeC 
en skadad | skottlossning +1) S Account: 
Aftonbladet ource Path; | Service 

Repository Path: identifier: 
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109 E 


186 


[SKOMMOSSNING T | 7IWWW. SEI 021-02-16 Aruract Family: | Source: pata E: 
Sundbyberg - |mLkB/man-skadad-efter-misstankt- 22:26:10(UTC Account? HEM LI 
en skadad skottlossning +1) Source Service 
Aftonbladet Repository Path: Identifier: 
110 |Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: o 
Sundbyberg — | mLkB/man-skadad-efter-misstankt- 22:26:15(UTC KnowledgeC 
en skadad skottlossning +1) Source Account: 
Aftenpladet Repository Path: un. 


Skottlossning i 
Sundbyberg — 
en skadad 
Aftonbladet 


Skottlossning i 
Sundbyberg — 
en skadad 
Aftonbladet 


https://www.aftonbladet.se/senastenytt/a/7K 
mLkB/man-skadad-efter-misstankt- 
skottlossning 


https://www.aftonbladet.se/senastenytt/a/7K 
mLkB/man-skadad-efter-misstankt- 
skottlossning 


2021-02-16 
22:27:43(UTC 
+1) 


2021-02-16 
22:27:45(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - 
Sidan 5 - 
Flashback 
Forum 


https://www.flashback.org/t3305870p5 


2021-02-16 
22:33:25(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


114  |Skottlossning  |https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: | Source: o 
Tulegatan 22:33:45(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - palike. Path: | Service 
Sidan5- epository Fath: | identifier: 
ashbac' 
Forum 
115  |Skottlossning  |https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: | Source: o 
Tulegatan 22:35:35(UTC KnowledgeC 
Sundbyberg 16 *1) Account: 
feb 2021 - Source, Path: | Service 
dM epository Fath: | Identifier: 
ashbac| 
Forum 
116  |Skottlossningi |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari o 
Sundbyberg - | mLkB/man-skadad-efter-misstankt- 22:45:38(UTC Account: 
en skadad | Skottlossning *1) Source Service 
Aftonbladet Repository Path: Identifier: 
117  |Skottlossningi |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari Es 
Sundbyberg - | mLkB/man-skadad-efter-misstankt- 22:45:39(UTC Account: 
en skadad | Skottlossning *1) Source Service 
Aftonbladet Repository Path: Identifier: 
118  |Skottlossning  |https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: | Source: E: 
Tulegatan 22:45:50(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Source Path: | Service 
"is e epository Fath: | Identifier: 
ashbac| 
Forum 
119 |Skottlossning  |https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: | Source: o 
Tulegatan 22:46:20(UTC KnowledgeC 
Sundbyberg 16 *1) S Account: 
feb 2021 - Rabosit Path: | Service 
nen epository Fath: | Identifier: 
ashbac| 
Forum 
120  |Skottlossning ` | https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: | Source: o 
Tulegatan 22:46:45(UTC KnowledgeC 
Sundbyberg 16 *1) Account: 
feb 2021 - Source. Path; | Service 
Sidan 5 epository Fath: | Identifier: 
ashbac| 
Forum 
121  |Skottlossningi |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari o 
Sundbyberg - | mLkB/man-skadad-efter-misstankt- 22:47:26(UTC Account: 
en skadad | skottlossning +1) Source Service 
Aftonbladet Repository Path: Identifier: 
122  |Skottlossning ` | https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: | Source: o 
Tulegatan 22:52:00(UTC KnowledgeC 
Sundbyberg 16 *1) Account: 
feb 2021 - nalito Path: | Service 
Sidan5- epository Fan: | identifier: 
ashbac| 
Forum 
123  |Skottlossning ` | https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: | Source: tes 
Tulegatan 22:53:20(UTC KnowledgeC 
Sundbyberg 16 +1) S Account: 
feb 2021 - Ropostt Path: Service 
Sidan5- epository FA: | identifier: 
ashbac| 
Forum 
124  |Skottlossning  |https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: — | Source: Safari o 
Tulegatan pa 22:55:04(UTC Account: 
undbyberg +1) Source Service 
= a e. ` Repository Path: | Identifier: 
Flashback 
Forum 
125  |Skottlossning  |https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: | Source: ES 
Tulegatan 22:55:05(UTC KnowledgeC 
Sundbyberg 16 +1) S Account: 
feb 2021 - sun Path; | Service 
SE Ki epository Fath: | Identifier: 
ashbac| 


Forum 


Bilaga 1. Calla mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


[Hüps7/WWW.-Tasnpack.orgrt33U587Upo -02-16 Artiract Family: 
Tulegatan 22:55:15(UTC 
Sundbyberg 16 +1) S 
feb 2051 = Repository Path: 
Sidar © " epository * | Identifier: 
ashbac| 
Forum 
Skottlossning  |https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: | Source: 
Tulegatan 22:56:05(UTC KnowledgeC 
Sundbyberg 16 *1) Account: 
feb 2021 - Eckes Path: | Service 
Sigan 6 2s Sposktory. * | Identifier: 
ashbac| 
Forum 
Skottlossning  |https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: | Source: 
Tulegatan 22:56:30(UTC KnowledgeC 
Sundbyberg 16 *1) Account: 
feb 2021 - Ropostto Path: | Service 
Ea Së pository * | Identifier: 
ashbac| 
Forum 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg - |mLkB/man-skadad-efter-skottlossning-i- 22:57:28(UTC Account: 
en skadad sundbyberg *1) Source Service 
Aftonbladet Repository Path: Identifier: 
Skottlossning i | https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg - | mLkB/man-skadad-efter-skottlossning-i- 22:57:28(UTC Account: 
en skadad sundbyberg +1) Source Service 
Aftonbladet Repository Path: Identifier: 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg — |mLkB/man-skadad-efter-skottlossning-i- 22:58:20(UTC Account: 
en skadad sundbyberg +1) Source Service 
Aftonbladet Repository Path: Identifier: 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg — |mLkB/man-skadad-efter-skottlossning-i- 22:58:33(UTC Account: 
en skadad sundbyberg +1) Source Service 
Aftonbladet Repository Path: Identifier: 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: 
Sundbyberg - | mLkB/man-skadad-efter-skottlossning-i- 22:58:35(UTC KnowledgeC 
en skadad sundbyberg +1) Account: 
Aftonbladet Source ov Bo: | Series 
epository FAN: | identifier: 
Skottlossning ` |https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: | Source: 
Tulegatan 23:00:05(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Sn Path; | Service 
ae A pository Fath: | Identifier: 
ashbac| 
Forum 
Skottlossning |https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: | Source: 
Tulegatan 23:01:30(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Source, Path: | Service 
silang åk epository FAN: | identifier: 
ashbac| 
Forum 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: 
Sundbyberg - | mLkB/man-skadad-efter-skottlossning-i- 23:01:35(UTC KnowledgeC 
en skadad | sundbyberg *1) Account: 
Aftonbladet Source, Path: | Service 
epository FAN: | identifier: 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg - | mLkB/man-skadad-efter-skottlossning-i- 23:02:55(UTC Account: 
en skadad | sundbyberg *1) Source Service 
Aftonbladet Repository Path: Identifier: 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: 
Sundbyberg - | mLkB/man-skadad-efter-skottlossning-i- 23:03:00(UTC KnowledgeC 
en skadad | sundbyberg +1) Account: 
Aftonbladet Source, Path; | Service 
epository Fath: | identifier: 
Skottlossning |https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: | Source: 
Tulegatan 23:03:45(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Seabee Path: | Service 
N POSILOrY! * | Identifier: 
ashbac| 
Forum 
Skottlossning |https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: | Source: 
Tulegatan 23:03:55(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Source, Path; | Service 
Sidar e en epository FAN: | identifier: 
ashbac| 
Forum 
Skottlossning  |https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: | Source: 
Tulegatan 23:27:15 (UTC KnowledgeC 
Sundbyberg 16 *1) Account: 
feb 2021 - Source, Path: | Service 
Sidang " epository FAN: | identifier: 
ashbac| 
Forum 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg — |mLkB/man-skadad-efter-skottlossning-i- 23:28:13(UTC Account: 
en skadad | sundbyberg +1) Source Service 
Aftonbladet Repository Path: Identifier: 
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| SKOTIOSSNING I | TIWWW. S y 021-02-16 Artiract Family: Source: O 
Sundbyberg - |mLkB/man-skadad-efter-skottlossning-i- 23:28:15(UTC Knowledge EMLI 
en skadad | sundbyberg *1) Account 
Aftonbladet Bouree i Path: | Service 
pository FAN: | Identifier: 
144  |Skottlossningi | https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari o 
Sundbyberg — |mLkB/man-skadad-efter-skottlossning-i- 23:36:47(UTC Account: 
en skadad | sundbyberg +1) Source Service 
Aftonbladet Repository Path: Identifier: 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: 
Sundbyberg - |mLkB/man-skadad-efter-skottlossning-i- 23:36:50(UTC KnowledgeC 
en skadad | sundbyberg +1) Account: 
Aftonbladet Source, Path: | Service 
epository Fath: | identifier: 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg — | mLkB/man-skadad-efter-skottlossning-i- 23:41:04(UTC Account: 
en skadad sundbyberg *1) Source Service 
Aftonbladet Repository Path: Identifier: 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: 
Sundbyberg - | mLkB/man-skadad-efter-skottlossning-i- 23:54:30(UTC KnowledgeC 
en skadad sundbyberg *1) Account: 
Aftonbladet Bo Path; | Service 
epository FAN: | identifier: 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg — |mLkB/man-skadad-efter-skottlossning-i- 23:54:31(UTC Account: 
en skadad sundbyberg +1) Source Service 
Aftonbladet Repository Path: Identifier: 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg — |mLkB/man-skadad-efter-skottlossning-i- 23:54:31(UTC Account: 
en skadad sundbyberg *1) Sa Service 
Aftonbladet Repository Path: Identifier: 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-17 Artifact Family: | Source: Safari 
Sundbyberg — |mLkB/man-skadad-efter-skottlossning-i- 00:04:06(UTC Account: 
en skadad sundbyberg +1) Source Service 
Aftonbladet Repository Path: Identifier: 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-17 Artifact Family: | Source: 
Sundbyberg - |mLkB/man-skadad-efter-skottlossning-i- 00:04:10(UTC KnowledgeC 
en skadad sundbyberg *1) Account: 
Aftonbladet Source, Path: | Service 
epository Fath: | identifier: 
Skottlossning |https://www.flashback.org/t3305870p6 2021-02-17 Artifact Family: | Source: 
Tulegatan 00:04:30(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Source, Path: | Service 
Sidan 6 a epository Fath: | identifier: 
ashbac| 
Forum 
153  |Skottlossning  |https://www.flashback.org/t3305870p7 2021-02-17 Artifact Family: | Source: Safari o 
IT må 00:04:56(UTC Account: 
undbyberg +1) Source Service 
Er S A 3 Repository Path: | Identifier: 
Flashback 
Forum 
154  |Skottlossning |https://www.flashback.org/t3305870p7 2021-02-17 Artifact Family: | Source: o 
Tulegatan 00:05:00(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Source rv Path: | Service 
SEE a epository * | Identifier: 
ashbac| 
Forum 
155  |Skottlossning |https://www.flashback.org/t3305870p7 2021-02-17 Artifact Family: | Source: o 
Tulegatan 00:05:35(UTC KnowledgeC 
Sundbyberg 16 *1) Account: 
feb 2021 - Source a Path; | Service 
pani ag pository * | Identifier: 
ashbac| 
Forum 
156  |Skottlossning  |https://www.flashback.org/t3305870p7 2021-02-17 Artifact Family: | Source: o 
Tulegatan 01:29:35(UTC KnowledgeC 
Sundbyberg 16 *1) Account: 
feb 2021 - Repository Path: | Service 
SE " posnory * | Identifier: 
ashbac| 
Forum 
157  |Skottlossningi | https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-17 Artifact Family: | Source: Safari o 
Sundbyberg — |mLkB/man-skadad-efter-skottlossning-i- 01:29:35(UTC Account: 
en skadad sundbyberg +1) Source Service 
Aftonbladet Repository Path: Identifier: 
158  |Skottlossningi | https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-17 Artifact Family: | Source: > 
Sundbyberg - |mLkB/man-skadad-efter-skottlossning-i- 01:29:40(UTC KnowledgeC 
en skadad sundbyberg *1) Account: 
Aftonbladet E Path; | Service 
pository * | Identifier: 
159 [Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-17 Artifact Family: | Source: Safari o 
Sundbyberg — |mLkB/man-skadad-efter-skottlossning-i- 01:40:45(UTC Account: 
en skadad sundbyberg +1) Source Service 
Aftonbladet Repository Path: Identifier: 
160 | Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-17 Artifact Family: | Source: o 
Sundbyberg - | mLkB/man-skadad-efter-skottlossning-i- 01:40:50(UTC KnowledgeC 
en skadad sundbyberg *1) Account: 
Aftonbladet E. Path; | Service 
pository * | Identifier: 
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16 = T MUPST/WWW.TlasnDbaCck.Org/133U587Up7 102-17 Artiract Family: | Source: 
ulegatan 01:41:45(UTC Knowledge 
Sundbyberg 16 +1) | Account EMLI 
feb 2021 - Bee ry Pam: | Sarvice 
Sigan r a epository Fath: | identifier: 
ashbac| 
Forum 
162  |Skottlossning —|https://www.flashback.org/t3305870p7 2021-02-17 Artifact Family: | Source: 
Tulegatan 01:51:40(UTC KnowledgeC 
Sundbyberg 16 *1) Account: 
feb 2021 - Bouree, Path: Service 
Sidan 7 " epository Fath: | identifier: 
ashbac| 
Forum 
163 |Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-17 Artifact Family: | Source: Safari 
Sundbyberg — |mLkB/man-skadad-efter-skottlossning-i- 02:04:52(UTC Account: 
en skadad | sundbyberg +1) Source Service 
Aftonbladet Repository Path: Identifier: 
164 | Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-17 Artifact Family: | Source: Safari 
Sundbyberg — |mLkB/man-skadad-efter-skottlossning-i- 02:04:52(UTC Account: 
en skadad | sundbyberg +1) Source Service 
Aftonbladet Repository Path: Identifier: 
165  |Skottlossning |https://www.flashback.org/t3305870p7 2021-02-17 Artifact Family: | Source: 
Tulegatan 02:11:20(UTC KnowledgeC 
Sundbyberg 16 *1) Account: 
feb 2021 - Source Service 
Sidan 7 - Repository Path: a 
2 and S Identifier: 
ashbac| 
Forum 
166  |Skottlossning |https://www.flashback.org/t3305870 2021-02-17 Artifact Family: | Source: Safari 
Wiegatan 46 02:11:21(UTC Account: 
feb 2021 - "m Source Identifier: 
Flashback Repository Path: ` 
Forum 
167  |Skottlossning |https://www.flashback.org/t3305870 2021-02-17 Artifact Family: | Source: 
Tulegatan 02:11:25(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - palita Path: | Service 
Elashpack epository Fath: | Identifier: 
orum 
168  |Skottlossning |https://www.flashback.org/t3305870 2021-02-17 Artifact Family: | Source: Safari 
ee ad Pr 11:38:51(UTC Account: 
feb 202 1 = +1) Source Ge 
Flashback Repository Path: i 
Forum 
169 |Skottlossning |https://www.flashback.org/t3305870p8 2021-02-17 Artifact Family: | Source: Safari 
Den 16 11:38:52(UTC Account: 
undbyberg *1) ‘Source Service 
= = A S Repository Path: | Identifier: 
Flashback 
Forum 
170  |Skottlossning |https://www.flashback.org/t3305870p8 2021-02-17 Artifact Family: | Source: 
Tulegatan 11:38:55(UTC KnowledgeC 
Sundbyberg 16 *1) Account: 
feb 2021 - rena t Path; | Service 
Sidan g is epository * | Identifier: 
ashbac| 
Forum 
171 Skottlossning |https://www.flashback.org/t3305870 2021-02-17 Artifact Family: | Source: Safari 
pora NG 15:16:40(UTC Account: 
feb 202 1 = "m Source identifier: 
Flashback Repository Path: ; 
Forum 
172 |Skottlossning |https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: | Source: Safari 
Tulegatan " 15:16:43(UTC Account: 
undbyberg +1) Source Service 
ED fe ` Repository Path: | Identifier: 
Flashback 
Forum 
173  |Skottlossning |https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: | Source: 
Tulegatan 15:16:45(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Soe Path: | Service 
Saan 3 m SE * | Identifier: 
ashbac| 
Forum 
174  |Skottlossning ` | https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: | Source: 
Tulegatan 15:18:10(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Bouree Path: | Service 
Sidan 9 Ki aposkory * | Identifier: 
ashbac| 
Forum 
175  |Skottlossning  |https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: | Source: 
Tulegatan 15:19:15(UTC KnowledgeC 
Sundbyberg 16 *1) Account: 
feb 2021 - Ce Path: | Service 
Sidan 9 S eposter af: Identifier: 
ashbac| 
Forum 
176  |Skottlossning ` | https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: | Source: 
Tulegatan 15:24:05(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Bouree Path: | Service 
Sidan 9 epository Fath: | identifier: 
ashbac| 
Forum 
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[müps7/WWW-TasnDback.orgrt33U587Up9 021-02-17 ArüractFamiy: | Source: e 
Tulegatan 15:41:55(UTC KnowledgeG-] EM LI 
Sundbyberg 16 *1) Account 
feb 2021 - Bou Path; | Service 
Sidan9- epository Fath: | identifier: 

ashbac| 
Forum 

178  |Skottlossning —|https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: | Source: o 
Tulegatan 15:42:35(UTC KnowledgeC 
Sundbyberg 16 *1) Account: 
feb 2021 - Source, Path: | Service 
Sidan 9- epository Fath: | identifier: 

ashbac| 
Forum 

179  |Skottlossning  |https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: | Source: o 
Tulegatan 15:42:40(UTC KnowledgeC 
Sundbyberg 16 *1) Account: 
feb 2021 - BOE Path: | Service 
eden Spostory * | Identifier: 

ashbac| 
Forum 

180  |Skottlossning |https://www.flashback.org/t3305870 2021-02-17 Artifact Family: | Source: Safari o 
en "T 17:16:57(UTC Account: 
feb 2021- “o Source identifier: 

Flashback Repository Path: : 
Forum 

181 Skottlossning  |https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: | Source: Safari o 

Tulegatan T 17:16:59(UTC Account: 
undbyberg +1) Source Service 
iso e a Š Repository Path: | Identifier: 

Flashback 
Forum 

182  |Skottlossning |https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: | Source: o 
Tulegatan 17:17:00(UTC KnowledgeC 
Sundbyberg 16 *1) Account: 
feb 2021 - a Path; | Service 
aidan a epository Fath: | Identifier: 

ashbac| 
Forum 

183  |Skottlossning |https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: | Source: o 
Tulegatan 17:17:40(UTC KnowledgeC 
Sundbyberg 16 *1) Account: 
feb 2021 - eter Path: | Service 
ERA 'SPOSILONY: * | Identifier: 

ashbac| 
Forum 

184  |Skottlossning |https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: | Source: o 
Tulegatan 17:53:05(UTC KnowledgeC 
Sundbyberg 16 *1) Account: 
feb 2021 - Souro- Path: | Service 
lana PROST * | Identifier: 

ashbac| 
Forum 

185  |Skottlossning |https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: | Source: o 
Tulegatan 17:53:10(UTC KnowledgeC 
Sundbyberg 16 *1) Account: 
feb 2021 - Source a Path: | Service 
RE epostory * | Identifier: 

ashbac| 
Forum 

186  |Skottlossning |https://www.flashback.org/t3305870p10 2021-02-17 Artifact Family: | Source: Safari o 

Llegan 16 18:51:05(UTC Account: 
undbyberg +1) Source Service 
= E a Repository Path: | Identifier: 

Flashback 
Forum 

187  |Skottlossning  |https://www.flashback.org/t3305870p10 2021-02-17 Artifact Family: | Source: o 
Tulegatan 18:51:10(UTC KnowledgeC 
Sundbyberg 16 *1) Account: 
feb 2021 - Source Path; | Service 
Sidan 10 - pository Fath: | identifier: 

ashbac' 
Forum 
188 https://www.booking.com/ 2021-02-17 Artifact Family: | Source: Safari o 
20:12:09(UTC Account: 
+1) Source Service 
Repository Path: | Identifier: 

189 [Booking.com | |https://www.booking.com/index.sv.html?label | 2021-02-17 Artifact Family: | Source: Safari o 

Officiell sida] |=gen173nr- 20:12:09(UTC Account: 
Basta hotellen | 1BCAEoggl46AdIM1gEaMgBiAECmAEIUAE | +1) S Service 
och HyAEN2AEBGAEBiAIBgAIDUAKI 1bWBBsAC Ge Path: | Identifier: 
boendealternat | AdICJDc2MGNjYjg5LWZkMjAtNDMyNS 1hM Ar ln FELE 

iven WVhLWYAZTQ1OTI2YjIOYtgCBeACAQ;sid- 
cb602dccc0a7647ccb33ac1440501f9a;keep 
 landing=1&sb price type-total& 

190 |Booking.com | |https://www.booking.com/index.sv.html?label | 2021-02-17 Artifact Family: | Source: o 
Officiell sida] |=gen173nr- 20:12:15(UTC KnowledgeC 
Bästa hotellen | 1BCAEoggl46AdIM1gEaMgBiAECmAEIUAE | +1) S Account: 
och HyAEN2AEBGAEBIAIBgAIDuAKI1bWBBsAC Repository Path; | Service 
boendealternat | AdICJDc2MGNjYjg5LWZkMjAtNDMyNS1hM epository Fat: | Identifier: 
iven WVhLWYAZTQ1OTI2YjIOYtgCBeACAQ;sid- 

cb602dccc0a7647ccb33ac1440501f9a;keep 
 landing-1&sb price type-total& 
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19 Booking.com |_| TIWWW. -T7 Artiract Family: | Source: 
Officiell sida] |=gen173nr- 20:12:15(UTC Account 
Basta hotellen |1BCAEoggl46AdIM1gEaMgBiAECMAEIUAE | +1) Service 
och HyAEN2AEBGAEBIAIBgAIDuAKI1bWBBsAC Source . | Identifier: 
boendealternat | AdICJDc2MGNjYjg5LWZkMjAtNDMyNS1hM Repository Path: 
iven WVhLWYAZTQ1OTI2YjlOYtgCBeACAQ;sid- 
cb602dccc0a7647ccb33ac1440501f9a;keep 
_landing=1&sb_price_type=total&#overlay 
192 "Booking com | |https://www.booking.com/index.sv.html?label | 2021-02-17 Artifact Family: | Source: Safari 
Officiell sida| |=gen173nr- 20:12:20(UTC Account: 
Basta hotellen | 1BCAEoggl46AdIM1gEaMgBiAECmAEIUAE | +1) Service 
och HyAEN2AEBGAEBIAIBgAIDuAKI1bWBBsAC Source h: | Identifier: 
boendealternat | AdICJDc2MGNjYjg5L WZKkMjAtNDMyNS 1hM Repository Path: 
iven WVhLWY4ZTQ10TI2YjI0YtgCBeACAQ;sid= 
cb602dccc0a7647ccb33ac1440501f9a;keep 
_landing=1&sb_price_type=total& 
193 |Booking.com | |https://www.booking.com/index.sv.html?label | 2021-02-17 Artifact Family: | Source: Safari 
Officiell sida] |=gen173nr- 20:12:20(UTC Account: 
Basta hotellen | TBCAEoggl46AdIM1gEaMgBiAECmAEIUAE | +1) Service 
och HyAEN2AEB6AEBIAIBqAlDuAKI1bWBBsAC Source . | Identifier: 
boendealternat | AdICJDc2MGNjYjg5L WZKkMjAtNDMyNS 1hM Repository Path: 
iven WVhLWYAZTQ1OTI2YjlOYtgCBeACAQ:;sid- 
cb602dccc0a7647ccb33ac1440501f9a;keep 
landing=1&sb_price_type=total&#overlay 
194 |Booking.com | |https:/Avww.booking.com/index.sv.html?label | 2021-02-17 Artifact Family: | Source: Safari 
Officiell sida] |=gen173nr- 20:12:24(UTC Account: 
Basta hotellen |1BCAEoggl46AdIM1gEaMgBiAECMAEIUAE | +1) Service 
och HyAEN2AEB6AEBIAIBGAIDuAKI1bWBBSAC Source . | Identifier: 
boendealternat | AdMICJDc2MGNjYjg5L WZKkMjAtNDMyNS 1hM Repository Path: 
iven WVhLWYAZTQ1OTI2YjlOYtgCBeACAQ:;sid- 
cb602dccc0a7647ccb33ac1440501f9a;keep 
 landing-1&sb price type-total& 
195 "Booking com | |https://www.booking.com/index.sv.html?label | 2021-02-17 Artifact Family: | Source: Safari 
Officiell sida] |=gen173nr- 20:12:27(UTC Account: 
Basta hotellen | 1BCAEoggl46AdIM1gEaMgBiAECmAEIUAE | +1) Service 
och HyAEN2AEB6AEBiAIBgAIDUAKI1bWBBsAC Source . | Identifier: 
boendealternat | AdICJDc2MGNjYjg5LWZkMjAtNDMyNS1hM Repository Path: 
iven WVhLWY4ZTQ10TI2Yjl0YtgCBeACAQ;sid= 
cb602dccc0a7647ccb33ac1440501f9a;keep 
 landing-1&sb price type-total& 
196  |Booking.com ` |https://www.booking.com/searchresults.sv.ht | 2021-02-17 Artifact Family: Source: Safari 
Hotell i Solna . ml?src-index&rows-20&error url-https?63A | 20:12:28(UTC Account: 
Boka hotell nu! | %2F%2Fwww.booking.com%2Findex.sv.htm | +1) Source Service 
o 0, Pi e 
I%3Flabel%3Dgen173nr. Repository Path: Identifier: 


1FCAEoggl46AdIM1gEaMgBiAECmAEIUAE 
HyAEN2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MG 
NjYjg5LWZkMjAtNDMyNS1hMWVhLWY4ZT 
Q10TI2YjI0YtgCBuACAQ%3Bsid%3Dcb602 
dccc0a7647ccb33ac1440501f9a963Bsb pric 
e type%3Dtotal%26%3B&label=gen173nr- 
1FCAEoggl46AdIM1gEaMgBiAECmAEIUAE 
HyAEN2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MG 
NjYjg5LWZkMjAtNDMyNS1hMWVhLWY4ZT 
Q10OTI2YjlOYtgCBuACAQ&sid-cb602dccc0a 
7647ccb33ac144050 1f9a&sb=1&sb_Ip=1&s 
earch_form_id=a6c1870414ab0085&ssne=S 
olna&ssne_untouched=Solna&checkin_mont 
hday=18&checkin_year_month=2021- 
2&checkout_monthday=21 &checkout_year_ 
month=2021-2&checkin=2021-02- 
18&checkout=2021-02- 

21&group adults=4&group children=0&no r 
ooms-2&group adults overlay=4&group ch 
ildren overlay=0&no rooms overlay=2&lpsr 
=1&dest type=hotel&dest id=546866&ss ra 
w=Solna+fr&ss label=Quality+Hotel+Friends 
%2C+So0lna%2C+Stockholms+1%C3%A4n% 
2C+Sverige&place id lon=18.00336938937 
99&place id lat-59.372415700433&ac posi 
tion=0&ac suggestion list length=2&ac lan 
gcode-sv&search selected-true&ac size-5 
&ac click type-b&latitude-59.37241570043 
3&longitude=18.0033693893799&search_pa 
geview_id=a6c1870414ab0085 


24 


Bilaga le Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
9 


Hotell i i Solna . 
Boka hotell nu! 


Https7/WWW.DOOKIng.COm/searcnresurts.sv.nt 
ml?src=index&rows=20&error_url=https%3A 


%2F%2Fwww.booking.com%2Findex.sv.htm 
I%3Flabel%3Dgen173nr- 
1FCAEoggl46AdIM1gEaMgBiAECmAEIUAE 
HyAEN2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MG 
NjYjg5LWZkMjAtNDMyNS1hMWVhLWY4ZT 
Q10TI2YjI0YtgCBuACAQ%3Bsid%3Dcb602 
dccc0a7647ccb33ac1440501f9a963Bsb pric 
e type%3Dtotal%26%3B&label=gen173nr- 
1FCAEoggl46AdIM1gEaMgBiAECmAEIUAE 
HyAEN2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MG 
NjYjg5LWZkMjAtNDMyNS1hMWVhLWY4ZT 
Q1OTI2YjlOYtgCBuACAQ&sid-cb602dccc0a 
7647ccb33ac144050 1f9a&sb=1&sb_Ip=1&s 
earch_form_id=a6c1870414ab0085&ssne=S 
olna&ssne_untouched=Solna&checkin_mont 
hday=18&checkin_year_month=2021- 
2&checkout_monthday=21 &checkout_year_ 
month=2021-2&checkin=2021-02- 
18&checkout=2021-02- 

21&group adults=4&group children=0&no r 
ooms-2&group adults overlay=4&group ch 
ildren overlay=0&no rooms overlay=2&lpsr 
-1&dest type-hotel&dest id=546866&ss ra 
w=Solna%20fr&ss_label=Quality%20Hotel% 
20Friends%2C%20Solna%2C%20Stockholm 
$%20I%C3%A4nN%2C%20S verige&place_id 
lon=18.0033693893799&place_id_lat=59.3 
72415700433&ac_position=0&ac_suggestio 
n_list_length=2&ac_langcode=sv&search_se 
lected=true&ac_size=5&ac_click_type=b&lati 
tude=59.372415700433&longitude=18.0033 
693893799&search pageview id=a6c18704 
14ab0085 


-17 


20: 12: 29(UTC 
+1) 


Aruract Family: Source 
Account 

Source BIN ce 

Repository Path: | Identifier: 


198 


Booking.com : 
Hotell i Solna . 
Boka hotell nu! 


https://www.booking.com/searchresults.sv.ht 
ml?src=index&rows=20&error_url=https%3A 
%2F%2Fwww.booking.com%2Findex.sv.htm 
I%3Flabel%3Dgen173nr- 
1FCAEoggl46AdIM1gEaMgBiAECmAEIUAE 
HyAEN2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MG 
NjYjg5LWZKMjAtNDMyNS 1hMWVhLWYAZT 
Q10TI2YjlI0OYtgCBuACAQ%3Bsid%3Dcb602 
dccc0a7647ccb33ac1440501f9a963Bsb pric 
e type%3Dtotal%26%3B&label=gen173nr- 
1FCAEoggl46AdIM1gEaMgBiAECmAEIUAE 
HyAEN2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MG 
NjYjg5LWZkMjAtNDMyNS1hMWVhLWY4ZT 
Q10OTI2YjlOYtgCBuACAQ&sid-cb602dccc0a 
7647ccb33ac144050 1f9a&sb=1&sb_Ip=1&s 
earch_form_id=a6c1870414ab0085&ssne=S 
olna&ssne_untouched=Solna&checkin_mont 
hday=18&checkin year month=2021- 
2&checkout monthday=21&checkout year. 
month=2021-2&checkin=2021-02- 
18&checkout=2021-02- 

21&group adults=4&group children=0&no r 
ooms-2&group adults overlay=4&group ch 
ildren overlay=0&no rooms overlay=2&lpsr 
-1&dest type-hotel&dest id=546866&ss ra 
w=Solna%20fr&ss_label=Quality%20Hotel% 
20Friends%2C%20Solna%2C%20Stockholm 
$%20I%C3%A4N%2C%20Sverige&place_id 
lon=18.0033693893799&place_id_lat=59.3 
72415700433&ac_position=0&ac_suggestio 
n_list_length=2&ac_langcode=sv&search_se 
lected=true&ac_size=5&ac_click_type=b&lati 
tude=59.372415700433&longitude=18.0033 
693893799&search pageview id=a6c18704 
14ab0085 


2021-02-17 
20:12:35(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


199 


Quality Hotel 

Friends i Solna 
— uppdaterade 
priser for 2021 


https://www.booking.com/hotel/se/quality- 
friends.sv.html?label=gen173nr- 
1FCAEoggl46AdIM1gEaMgBiAECmAEIUAE 
HyAEN2AEB6AEB- 

AELiAIBqAIDuAKI 1bWBBsACAdICJDc2MG 
NjYjg5LWZkMjAtNDMyNS1hMWVhLWY4ZT 
Q10TI2YjlOYtgCBuACAQ&sid-cb602dccc0a 
7647ccb33ac1440501f9a&all sr blocks=546 
86601 230913440 0 1 0%2C54686601 23 


0913440 0 1 O&checkin=2021-02- 
18&checkout=2021-02-21&dest id=- 
2522526&dest type=city&group adults=4&g 
roup children=0&hapos=1&highlighted bloc 
ks-54686601 230913440 0 1 0%2C54686 


601 230913440 0 1 O&hpos-1&no rooms 
=2&req adults=4&req children=0&room1=A 
%2CA&room2=A%2CA&sr order=popularity 
&srepoch=1613589148&srpvid=5cad870e5f 
9a0144&ucfs=1&matching block id=546866 


01 230913440 O 1 O&ref is wI=1&srhp=1 


2021-02-17 
20:12:40(UTC 
*1) 


1 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 
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Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802- - 
06 


[Quamy Hoter | 
Friends i Solna 
— uppdaterade 
priser fór 2021 


[Https77/WWW.DOOKIng.COm/searcnresurts.sv.nt 
ml?src=index&rows=20&error_url=https%3A 


%2F %2Fwww.booking.com%2Findex.sv.htm 
I%3Flabel%3Dgen173nr- 
1FCAEoggl46AdIM1gEaMgBiAECmAEIUAE 
HyAEN2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MG 
NjYjg5LWZkMjAtNDMyNS1hMWVhLWY4ZT 
Q10TI2YjI0YtgCBuACAQ%3Bsid%3Dcb602 
dccc0a7647ccb33ac1440501f9a963Bsb pric 
e_type%3Dtotal%26%3B&label=gen1 73nr- 
1FCAEoggl46AdIM1gEaMgBiAECmAEIUAE 
HyAEN2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MG 
NjYjg5LWZkMjAtNDMyNS1hMWVhLWY4ZT 
Q10OTI2YjlOYtgCBuACAQ&sid-cb602dccc0a 
7647ccb33ac144050 1f9a&sb=1&sb_Ip=1&s 
earch_form_id=a6c1870414ab0085&ssne=S 
olna&ssne_untouched=Solna&checkin_mont 
hday=188.checkin_year_month=2021- 
2&checkout_monthday=21 &checkout_year_ 
month=2021-2&checkin=2021-02- 
18&checkout=2021-02- 

21&group adults=4&group children=0&no r 
ooms-2&group adults overlay=4&group ch 
ildren overlay=0&no rooms overlay=2&lpsr 
-1&dest type-hotel&dest id=546866&ss ra 
w=Solna+fr&ss label=Quality+Hotel+Friends 
%2C+So0lna%2C+Stockholms+1%C3%A4n% 
2C+Sverige&place id lon=18.00336938937 
99&place id lat-59.372415700433&ac posi 
tion=0&ac suggestion list length=2&ac lan 
gcode-sv&search selected=true&ac size=5 
&ac click type-b&latitude-59.37241570043 
3&longitude= 18.0033693893799&search pa 
geview id-a6c1870414ab0085;highlighted ` 
hotels-546866 


-02-17 
20: 12:41(UTC 
*1) 


193 


Aruract Family: 


Source 


Repository Path: 


Feu Bata c 
ccoun 
Account HEMLI 


Identifier: 


201 


202 


Quality Hotel 

Friends i Solna 
— uppdaterade 
priser för 2021 


Quality Hotel 

Friends i Solna 
— uppdaterade 
priser för 2021 


https://www.booking.com/hotel/se/quality- 
friends.sv.html?label=gen173nr- 
1FCAEoggl46AdIM1gEaMgBiAECMmAEIuAE 
HyAEN2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MG 
NjYjg5LWZkMjAtNDMyNS1hMWVhLWY4ZT 
Q10TI2YjlIOYtgCBuACAQ;sid=cb602dccc0a 
7647ccb33ac1440501f9a;all_sr_blocks=546 
86601 230913440 0 1 0%2C54686601 23 


0913440 0 1 O;checkin-2021-02- 
18;checkout-2021-02-21;dest id-- 
2522526; ;dest type=city; dist-0: :group adults 
=4;group_children=0;hapos=1;highlighted_bl 
ocks=54686601 230913440 0 1 0%2C546 


86601 230913440 0 1 O;hpos-i;matching 


block id=54686601 230913440 0 1 0;no 
 rooms-2;ref is wlz1;req adults-4;req chil 
dren=0;room1 =A%2CA; room2=A%2CA: sb p 
rice type=total;sr order=popularity;srepoch= 
1613589148; :srpvid= 5cad870e5f9a0144;type 


=total;ucfs=1& 


https://www.booking.com/hotel/se/quality- 
friends.sv.html?label=gen173nr- 
1FCAEoggl46AdIM1gEaMgBiAECmAEIUAE 
HyAEN2AEB6AEB- 

AELiAIBqAIDuAKI 1bWBBsACAdICJDc2MG 
NjYjg5LWZkMjAtNDMyNS1hMWVhLWY4ZT 
Q10OTI2YjlOYtgCBuACAQ;sid-cb602dccc0a 
7647ccb33ac1440501f9a;all sr blocks=546 
86601 230913440 0 1 0%2C54686601 2283 


0913440 0 1 O;checkin-2021-02- 
18;checkout-2021-02-21;dest id-- 
2522526;dest type=city;dist=0;group adults 
=4; ;group children =0;hapos=1;highlighted bl 
ocks=54686601 230913440 0 1 0%2C546 
86601 230913440 0 1 O;hpos-1;matching 
block id=54686601 230913440 0 1 Ono 
rooms-2;ref is wiren adults-4;req chil 
dren-0;room1-A962CA;room2-A962CA;sb p 
rice type-total;sr order=popularity;srepoch= 
1613589148;srpvid=5cad870e5f9a0144;type 
=total;ucfs=1& 


2021-02-17 
20:12:41(UTC 
+1) 


2021-02-17 
20:12:45(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


203 


oslo - Sök pa 
Google 


https://www.google.se/search?q=oslo&ie=UT 
F-8&0e=UTF-8&hl=sv-se&client=safari 


2021-02-18 
00:16:05(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


204 


oslo - Sök på 
Google 


https://www.google.se/search?q=oslo&ie=UT 
F-8&0e=UTF-8&hl=sv-se&client=safari 


2021-02-18 
00:16:06(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


205 


Oslo — Google 
Maps 


https://www.google.com/maps/place/Oslo,+N 
orge/@59.3873913,17.9874414, 12z/data=!4 
m2!3m1!1s0x46416e61f267f039:0x7e92605f 
d3231e9a?hl=sv-se 


2021-02-18 
00:16:57(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


206 


Norge till 
Norge — 
Google Maps 


https://www.google.com/maps/dir/Lillestr%C 

3%B8m,+Norge/Oslo,+Norge/@59.9454311, 
10.9070776,10z/data=!4m8!4m7!1m2!1m1!1 

s0x46417b5f82bbf777:0x6021ba6f044063cd 
!4m2!1m1!1s0x46416e61f267f039:0x7e9260 
5fd3231e9a!3e0?hl=sv-se 


2021-02-18 
00:19:22(UTC 


+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


207 


Norge till 
Norge — 
Google Maps 


https://www.google.com/maps/dir/T%C3%B8 
nsberg, tNorge/Oslo,+Norge/()59.5937976,1 
0.4595804,8z/data=!4m8!4m7!1m2!1m1!1s0 

x4646b7388d757dab:0x90ca13e6ed9f9a3f!1 

m2!1m1!1s0x46416e61f267f039:0x7e92605f 
d3231e9a!3e0?hl=sv-se 


2021-02-18 
00:34:02(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


26 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
08 


oslo tidszon - 
Sók pà Google 


[osio uaszon - JnUups7/WWW.google-se/searcn ciient-sararms 
Sök pa Google | channel=iphone_bm&source=hp&ei=6qctY Ki 


yGMn5qwHst66Y Cg&q=oslo+tidszon&oq=os 
lo+tid&gs_Icp=ChFtb2JpbGUtZ3dzLXdpei1o 
cBABGAlyAggAMgllADICCAAyAggAMgllAD 
ICCAAyAggAMgY IABAWEB46AggpOg4IKR 
CxAxDHARCjAhCTAjoLCCkQxwEQrwEQkw 
I6CwgpELEDEIMBEJMCOgglABCxAxCDAT 
olCC4QsQMQgwE6CwguELEDEMcBEKMC 
OglILjoFCAAQsQM6CwguELEDEMCBEK8B 
OgUILhCxAzoIlCCkQsQMQkwl6CAguEMcB 
EK8BOggILhCxAxCTAjoLCC4QxwEQrwEQK 
wJQ6hFYIXNg- 
oEBaAJwAHgAgAFsiAH1BZIBAZUUM5gBA 
KABAbABDwé&sclient=mobile-gws-wiz-hp 


https://www.google.se/search?client=safari& 
channel=iphone_bm&source=hp&ei=6qctY Ki 
yGMn5qwHst66Y Cg&q=oslo+tidszon&oq=os 
lo+tid&gs_Icp=ChFtb2JpbGUtZ3dzLXdpei1o 
cBABGAlyAggAMgllADICCAAyAggAMgllAD 
ICCAAyAggAMgYIABAWEBA46AggpOg4IKR 
CxAxDHARCjAhCTAjoLCCkQxwEQrwEQkw 
|6CwgpELEDEIMBEJMCOggIABCxAxCDAT 
olCC4QsQMQgwE6CwguELEDEMcBEKMC 
OglILjoFCAAQsQM6CwguELEDEMCBEK8B 
OgUILhCxAzolCCkQsQMOkwI6CAguEMcB 
EK8BOggILhCxAxCTAjoLCC4QxwE QrwEQk 
wJQ6hF YIXNg- 
oEBaAJwAHgAgAFSiAH1BZIBAzUuM5gBA 
KABAbABDwé&sclient=mobile-gws-wiz-hp 


021-02-18 
00:34:21(UTC 
*1) 


2021-02-18 
00:34:25(UTC 
*1) 


T 


194 


Aruract Family: 


Source 


Repository Path: 


Artifact Family: 


Source 


Repository Path: 


Sourcer Bata E: 
ccoun 
Account HEMLI 


Identifier: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - 
Flashback 
Forum 


https://www.flashback.org/t3305870 


2021-02-18 
04:48:34(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - 
Sidan 12 - 
Flashback 
Forum 


https://www.flashback.org/t3305870p12 


2021-02-18 
04:48:35(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Skottlossning 
Tulegatan 
Sundbyberg 16 


https://www.flashback.org/t3305870p12 


2021-02-18 
04:48:40(UTC 
+1) 


Artifact Family: 


Source: 
KnowledgeC 
Account: 


feb 2021 - Source . | Service 
Sidan 12 - Repository Path: | Identifier: 
Flashback 
Forum 
213  |Skottlossning |https://www.flashback.org/t3305870p12 2021-02-18 Artifact Family: | Source: 
Tulegatan 04:49:45(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Source . | Service 
Sidan 12 - Repository Path: | Identifier: 
Flashback 
Forum 
214 |Skottlossning |https://www.flashback.org/t3305870p12 2021-02-18 Artifact Family: | Source: 
Tulegatan 05:29:10(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Source . | Service 
Sidan 12 - Repository Path: | Identifier: 
Flashback 
Forum 
215  |Skottlossning |https://www.flashback.org/t3305870p12 2021-02-18 1 Artifact Family: | Source: Safari 
Tulegatan pa m eee Account 
undbyberg +1 ervice 
Source ifar 
Kan ta zu : Repository Path: | Identifier: 
Flashback 
Forum 
216  |Skottlossning |https://www.flashback.org/t3305870p12 2021-02-18 Artifact Family: | Source: 
Tulegatan 16:33:45(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Source . | Service 
Sidan 12 - Repository bath: Identifier: 
Flashback 
Forum 
217  |Skottlossning |https://www.flashback.org/t3305870p12 2021-02-18 Artifact Family: | Source: 
Tulegatan 16:36:15(UTC KnowledgeC 
Sundbyberg 16 *1) Account: 
feb 2021 - Source . | Service 
Sidan 12 - Repository Path: Identifier: 
Flashback 
Forum 
218  |Skottlossning |https://www.flashback.org/t3305870 2021-02-19 1 Artifact Family: | Source: Safari 
eae NG 01 19 UIE Account: 
un er + rvi 
feb 20H - : Source E identifier 
Flashback Repository Path: 
Forum 
219 |Skottlossning  |https://www.flashback.org/t3305870p2 2021-02-19 1 Artifact Family: | Source: Safari 
DE ra Se SSES Account: 
undbyberg +1 ervice 
Source far 
reb 2 2 Repository Path; | Identifier: 
Flashback 
Forum 
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tps 77WWW.TasnpacK.orgrt33U58 7 Up T3 -02-19 Arüract Family: | Source 
Tulegatan 16 01:19:47(UTC Account 
undbyberg +1) Source Service 
E e el 3 Repository Path: | Identifier: 
Flashback 
Forum 
Skottlossning |https://www.flashback.org/t3305870p13 2021-02-19 Artifact Family: | Source: 
Tulegatan 01:19:50(UTC KnowledgeC 
Sundbyberg 16 +1) S Account: 
feb 2021 - ource Service 
Sidan 13 - Repository Path: | Identifier: 
Flashback 
Forum 
Skottlossning |https://www.flashback.org/t3305870p12 2021-02-19 Artifact Family: | Source: Safari 
Tulegatan NG 01:20:01(UTC Account: 
undbyberg +1) Source Service 
= 2 al 7 Repository Path: | Identifier: 
Flashback 
Forum 
Skottlossning |https://www.flashback.org/t3305870p12 2021-02-19 Artifact Family: | Source: 
Tulegatan 01:20:05(UTC KnowledgeC 
Sundbyberg 16 +1) S Account: 
feb 2021 - ource Service 
Sidan 12 - Repository Path: Identifier: 
Flashback 
Forum 
Skottlossning |https://www.flashback.org/t3305870p12 2021-02-19 Artifact Family: | Source: 
Tulegatan 01:41:05(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - source Service 
Sidan 12 - Repository Path: Identifier: 
Flashback 
Forum 
Skottlossning |https://www.flashback.org/t3305870p13 2021-02-19 Artifact Family: | Source: Safari 
Lulegatan na 01:41:17(UTC Account: 
undbyberg +1) Source Service 
es = al " Repository Path; | Identifier: 
Flashback 
Forum 
Skottlossning —|https://www.flashback.org/t3305870p13 2021-02-19 Artifact Family: | Source: 
Tulegatan 01:41:20(UTC KnowledgeC 
Sundbyberg 16 *1) S Account: 
feb 2021 - ource . | Service 
Sidan 13 - Repository Path: Identifier: 
Flashback 
Forum 
Skottlossning  |https://www.flashback.org/t3305870p13 2021-02-19 Artifact Family: | Source: 
Tulegatan 01:55:35(UTC KnowledgeC 
Sundbyberg 16 +1) S Account: 
feb 2021 - ource . | Service 
Sidan 13 - Repository Path: | Identifier: 
Flashback 
Forum 
2013 Audi S8 |https://biluppgifter.se/fordon/TYK689 2021-02-19 Artifact Family: | Source: Safari 
4.0 ÖS 02:26:19(UTC Account: 
quattro, Sva +1) S Service 
519hk pa ource . | Identifier: 
Biluppgifter.se Repository Path: 
2013 Audi 88 |https://biluppgifter.se/fordon/TYK689#agare | 2021-02-19 Artifact Family: | Source: Safari 
4.0 non ti 02:26:21(UTC Account: 
quattro, Sva +1) S Service 
519hk pà ource ifier: 
Bilupp ae = Repository Path: | Identifier: 
Kim Mats Bo https://www.merinfo.se/person/Partille/Kim- | 2021-02-19 Artifact Family: Source: Safari 
Nyman Mats-Bo-Nyman-1993/bv6sp- 02:26:23(UTC Account: 
(Partille, 27 àr) |4k23a?utm source-biluppgifter&utm mediu *1) Source Service 
- Merinfo.se m=owner&utm_term=person Repository Path: Identifier: 
Kim Mats Bo  |https://www.merinfo.se/person/Partille/Kim- | 2021-02-19 Artifact Family: | Source: 
Nyman Mats-Bo-Nyman-1993/bv6sp- 02:26:25(UTC KnowledgeC 
(Partille, 27 ar) |4k23a?utm_source=biluppgifter&utm_mediu +1) S Account: 
- Merinfo.se m=owner&utm_term=person Reposit ory Path: Service 
* | Identifier: 
2013 Audi 88 |https://biluppgifter.se/fordon/TYK689#agare | 2021-02-19 Artifact Family: | Source: 
4.0 TFSI 02:26:25(UTC KnowledgeC 
quattro, Svart / *1) S Account: 
519hk pa Geroch Path: Service 
Biluppgifter.se epository Fath: | Identifier: 
https://www.merinfo.se/search?ae6=Nedre% | 2021-02-19 Artifact Family: | Source: Safari 
20Furuskogsv%C3%A4gen%204%20lgh%2 | 02:26:35(UTC Account: 
02202&ae4=Partille&d=p +1) Service 
Source Identifier: 
Repository Path: d 
https://www.me | https://www.merinfo.se/search?ae6=Nedre% | 2021-02-19 Artifact Family: | Source: 
rinfo.se/search |20Furuskogsv%C3%A4gen%204%20lgh%2 | 02:26:40(UTC KnowledgeC 
?ae6=Nedre% |02202&ae4=Partille&d=p +1) S Account: 
20Furuskogsva ourc . | Service 
gen%204%20I Repository Path: | Identifier: 
gh%202202&a 
e4=Partille&d= 
p 
Skottlossning |https://www.flashback.org/t3305870 2021-02-19 Artifact Family: | Source: Safari 
pue pa 14:11:23(UTC Account: 
undbyberg +1 Service 
feb 2021 - ) Source . | Identifier: 
Flashback Repository Path: 
Forum 


28 


Bilaga 1. cals mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


196 


6 Srono MUPST/WWW.TlasnNbaCck.Org/133U587UPT3 021-02-19 Artiract Family: | Source: Bata e 
ulega am 14:11:24(UTC Account | HEMLIG] 
Sundbyberg 16 +1) Source Service HEMLI 
sidan ias Repository Path; | Identifier: 
Flashback 
Forum 
237  |Skottlossning  |https://www.flashback.org/t3305870p13 2021-02-19 Artifact Family: | Source: o 
Tulegatan 14:11:25(UTC KnowledgeC 
Sundbyberg 16 +1) Source Account: 
e - H i 
Sidan 13 - Repository Path: | enter. 
Flashback 
Forum 
238  |Skottlossning |https://www.flashback.org/t3305870p12 2021-02-19 Artifact Family: | Source: Safari o 
Tulegatan NG 14:11:48(UTC Account: 
undbyberg +1) Source Service 
reb a al S Repository Path: | Identifier: 
Flashback 
Forum 
239 |Skottlossning |https://www.flashback.org/t3305870p12 2021-02-19 Artifact Family: | Source: o 
Tulegatan 14:11:50(UTC KnowledgeC 
an 16 +1) Source Account: 
e - : i 
Sidan 12 - Repository Path: "OS, 
Flashback 
Forum 
240 | Google https://translate.google.com/ 2021-02-19 Artifact Family: | Source: Safari o 
Oversátt 14:46:23(UTC Account: 
+1) Service 
Source ifar 
Repository Path: | Identifier: 
241 [Google https://translate.google.com/?sl=sv&tl=en&te | 2021-02-19 Artifact Family: | Source: Safari o 
Oversátt xt=grabbarna%20ska%20%C3%A5ka%20dit | 14:47:00(UTC Account: 
t%20igen%200ch%20knacka%20p%C3%A5 | +1) S Service 
%20d%C3%B6rren%200m%20han%20%C3 Banos Path: | Identifier: 
%A4r%20d%C3%A4r%20d%C3%A5%20ta SPposkory QUIE 
%20med%20honom%20&op=translate 
242  |Google https://translate.google.com/?sl-sv&tl-en&o | 2021-02-19 Artifact Family: | Source: Safari o 
Oversátt p=translate 14:48:34(UTC Account: 
+1) Service 
Source far 
Repository Path: | Identifier: 
243  |Skottlossning |https://www.flashback.org/t3305870 2021-02-19 Artifact Family: | Source: Safari o 
Tulegatan 18 16:04:23(UTC Account: 
undbyberg +1 Service 
feb 2021 - | Source . | Identifier: 
Flashback Repository Path: 
Forum 
244  |Skottlossning |https://www.flashback.org/t3305870 2021-02-19 Artifact Family: | Source: E: 
Tulegatan 16:04:25(UTC KnowledgeC 
Sundbyberg 16 +1) Source Account 
el - ; . | Service 
Flashback Repository Path: | Identifier: 
Forum 
245  |Skottlossning |https://www.flashback.org/t3305870p13 2021-02-19 Artifact Family: | Source: Safari o 
Lulegatan " 16:04:33(UTC Account: 
undbyberg +1) Source Service 
TED 20 al : Repository Path: | Identifier: 
Flashback 
Forum 
246  |Skottlossning |https://www.flashback.org/t3305870p13 2021-02-19 Artifact Family: | Source: o 
Tulegatan 16:04:35(UTC KnowledgeC 
Sundbyberg 16 +1) Source Account: 
e - H i 
Sidan 13- Repository Path: eier 
Flashback 
Forum 
247  |Courtyard by |https://www.booking.com/hotel/se/courtyard- | 2021-02-20 Artifact Family: | Source: Safari o 
Marriott stockholm.sv.html?label-gen173nr- 01:19:57(UTC Account: 
Stockholm 1DCAEoggl46AdIM1gEaMgBiAECmAEIUAE | +1) s Service 
Kungsholmen i | HyAENZAED6AEBIAIBqAIDuALugsGBBSAC Revost Path: | Identifier: 
Stockholm- | AdICJDg5NzdhNGJILWQzYTYtNDEOOS1iY epository Path: 
uppdaterade =| WIWLWNmZDdkNWRKYzMOM9gCBOACAQ 
priser för 2021 |;sid=cb602dccc0a7647ccb33ac144050 1f9a; 
all sr blocks=17260306 246421916 0 2 0; 
checkin=2021-02-19;checkout=2021-02- 
20;dest id=1324;dest type=district;dist=0;gr 
oup adults= =2;group_children=0;hapos=1;hig 
hlighted_blocks=17260306 246421916_0 | 2 
_0:hpos=1;matching_block_id=17260306_24 
6421916 0 2 O;no_rooms=1;ref_is wl=1;ro 
om1=A%2CA;sb price type= =total: Sr i order= 
popularity;sr pri blocks= 17260306 2464219 
16 0 2 0 80300;srepoch=1613780374;srp 
vid=6fb1024af9220203;type=total;ucfs=1& 
248  |Skottlossning |https://www.flashback.org/t3305870 2021-02-20 Artifact Family: | Source: Safari o 
Tulegatan 18 15:13:59(UTC Account: 
undbyberg +1 Service 
feb 2021 - ) Source . | Identifier: 
Flashback Repository Path: 
Forum 
249 |Skottlossning  |https://www.flashback.org/t3305870p13 2021-02-20 Artifact Family: | Source: Safari o 
Tulegatan 46 15:14:00(UTC Account: 
undbyberg +1) Source Service 
= E zn S Repository Path: | Identifier: 
Flashback 
Forum 
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Dps77WWW.Tasnback.org/t33U58 /'Up T3 -02-20 Arüractramiy: | Source: 
Tulegatan d 15:14:05(UTC Knowled 
un er +1 Account 
feb 2021 - 7 ) Source . | Service 
Sidan 13 - Repository Path: Identifier: 
Flashback 
Forum 
Skottlossning |https://www.flashback.org/t3305870p13 2021-02-20 Artifact Family: Source: 
Tulegatan 15:41:45(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Source . | Service 
Sidan 13 - Repository Path: Identifier: 
Flashback 
Forum 
STF af https://www.booking.com/hotel/se/af- 2021-02-20 1 Artifact Family: Source: Safari 
Chapman 4 chapman.sv.html?label=gen173nr- 23:07:55(UTC Account: 
Skeppsholmen | 1DCAEoggl46AdIM1gEaMgBiAECmAEIUAE | +1) Service 
i Stockholm - 7 |HyAEN2AED6AEBIAIBgAIDuALPjcaBBsAC Source . | Identifier: 
uppdaterade — | AdICJDES5NTY1MzgOLWIwODctNDEOMy04 Repository Path: 
priser för 2021 | N2ZhLTZjMGMyYjg2MTU2ZtgCBOACAQ&si 
d=cb602dccc0a7647ccb33ac1440501f9a&all 
Sr blocks=29772913 91471534 1 2 O&ch 
eckin=2021-02-20&checkout=2021-02- 
21&dest_id=- 
2524279&dest type=city&group adults=1&g 
roup children=0&hapos=53&highlighted blo 
cks=29772913 91471534 1 2 O&hpos-13 
&no rooms-1&req adults=1&req children= 
O&room1=A&sr order-popularity&sr pri blo 
cks-29772913 91471534 1 2 0 242998s 
repoch=1613858753&srpvid=90a29b602565 
015a&ucfs=1&matching block id=29772913 
91471534 1 2 O&srhp=1&ref is wlz1 
scandic https://www.google.se/search?q-scandic*st | 2021-02-20 1 Artifact Family: Source: Safari 
stockholm - ockholm&ie=UTF-8&0e=UTF-8&hl=sv- 23:08:44(UTC Account: 
Sök pá Google | se&client=safari +1) Source Service 
Repository Path: | Identifier: 
radisson blu -  |https://www.google.se/search?q-radisson-bl | 2021-02-20 1 Artifact Family: Source: Safari 
S6k pa Google | u&ie=UTF-8&0e=UTF-8&hl=sv- 23:09:36(UTC Account: 
se&client=safari +1) Source Service 
Repository Path: | Identifier: 
First Hotel https://www.google.se/travel/hotels/first%20h | 2021-02-20 1 Artifact Family: | Source: Safari 
Kungsbron otel/entity/CgoltqzgOuXh2uNBEAE?g2lb-25 | 23:09:55(UTC Account: 
02548,2503781 ,2503839,4258168,4306835, | +1) Service 
4308227 ,4317915,4328159,4371335,44017 Source h: | Identifier: 
69,4419364,4463666,4466980,4482194,448 Repository Path: 
2438,4486153,4491350,4495816,4496891,4 
503422,4270859,4284970&hl=sv- 
SE&gl-se&ap-aAE&grf-ErEBCiwIDhloEiZyJ 
CoiCgcl5Q8QAxgOEgcl5Q8QAxgPIAAwHk 
DKAkoHCOUPEAIYFBIKCAcoAToEOgIgARI 
PCAgoAToHQgUI8j4YAUABEgsIEygCOgW 
aAQIIARoLCBMSBwoFmgECCAEaAggOGkl 
IBxIOCgw6CgoDCNIGGgNTRUsSDgoMOgo 
KAwiaCBoDUOVLEg4KDDoKCgMI4gkaA1N 
FSxlOCgw6CgoDCKoLGgNTRUSsiAiAB&q=fi 
rst-hotel&rp-ELas4NLI4drjORCHzlIPuhoi35s 
sBEKyB6YaBoNK47gEQ2K- 
04 HtoMPMATgCQAFIA6IBCVNOb2NraG9s 
bcABA8gBAA&ictx=1&ved=2ahUKEwi1xbyd 
vfnuAhXIT8AKHQUnBQoQvS4wAHoECAM 
QHQ 
First Hotel https://www.google.se/travel/hotels/first%20h | 2021-02-20 1 Artifact Family: | Source: Safari 
Kungsbron otel/entity/CgoltqzgOuXh2uNBEAE?g2lb-25 23:10:24(UTC Account: 
02548%2C2503781%2C2503839%2C42581 | +1) Service 
68%2C4306835%2C4308227%2C4317915 Source . | Identifier: 
%2C4328159%2C4371335%2C4401769%2 Repository Path: 
C4419364%2C4463666%2C4466980%2C4 
482194%2C4482438%2C4486153%2C4491 
350%2C4495816%2C4496891%2C4503422 
%2C4270859%2C4284970&hl=sv- 
SE&gl=se&ap=aAE&q=first%20hotel&rp=EL 
as4NLl4dr¡QRCHzIPuhoi35ssBEKyB6YaBo 
NK47gEQ2K- 
04_HtoMPMAalBCVNOb2NraG9sbTgBQAFI 
Aw&ictx=1&sa=X&utm_campaign=sharing&u 
tm_medium=link&utm_source=htls&ts=CAE 
SABozChUSEToPbsOkcmEgU3RVY 2tob2xt 
GgASGhIUCgcl5Q8QAxgOEgcl5Q8QAxgP 
GAEyAhAAKg8KCygBSglgAToDUOVLGgA 
E-post - mahad | https://outlook.live.com/mail/0/inbox 2021-02-20 1 Artifact Family: Source: Safari 
alii - Outlook 23:31:19(UTC Account: 
+1) Source Service 
Repository Path: | Identifier: 
Skottlossning |https://www.flashback.org/t3305870 2021-02-21 1 Artifact Family: Source: Safari 
a 46 02:35:39(UTC Account: 
undbyberg +1 Service 
feb 2021 - Source . | Identifier: 
Flashback Repository Path: 
Forum 
Skottlossning  |https://www.flashback.org/t3305870p13 2021-02-21 1 Artifact Family: | Source: Safari 
eter M 02:35:40(UTC Account: 
ER +1) Source Service 
ee ae: Repository Path: | Identifier: 
Flashback 
Forum 
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MUPST/WWW.TlasnNDbaCck.Org/133U587UPT3 -02-21 ArüractFamiy: | Source: 
Tulegatan 16 02:35:45(UTC Knowled 
undbyberg +1 Account 
feb 2021 - | Source Service 
Sidan 13 - Repository Path: | identifier: 
Flashback 
Forum 
Skottlossning |https://www.flashback.org/t3305870 2021-02-21 1 Artifact Family: | Source: Safari 
nk 46 03:36:19(UTC Account: 
undbyberg +1 Service 
feb 2021 - ) Source . | Identifier: 
Flashback Repository Path: 
Forum 
Skottlossning |https://www.flashback.org/t3305870 2021-02-21 Artifact Family: | Source: 
Tulegatan 03:36:20(UTC KnowledgeC 
Sundbyberg 16 +1) S Account: 
feb 2021 - ource . | Service 
Flashback Repository Path: | Identifier: 
Forum 
Skottlossning —|https://www.flashback.org/t3305870p13 2021-02-21 1 Artifact Family: | Source: Safari 
Tulegatan pa 03:36:30(UTC Account: 
undbyberg +1) Source Service 
[Bb Ge AS ` Repository Path: | Identifier: 
Flashback 
Forum 
Skottlossning  |https://www.flashback.org/t3305870p13 2021-02-21 Artifact Family: | Source: 
Tulegatan 03:36:35(UTC KnowledgeC 
Sundbyberg 16 *1) S Account: 
feb 2021 - ource . | Service 
Sidan 13 - Repository Path: | identifier: 
Flashback 
Forum 
Efterlyst 2021 | https://m.youtube.com/results?sp=mAEA&se | 2021-02-21 1 Artifact Family: | Source: Safari 
skottlyssning ` arch_query=Efterlyst+2021+skottlyssning+st | 03:37:42(UTC Account: 
stundbyberg - |undbyberg +1) Source Service 
YouTube Repository Path: Identifier: 
Google https://translate.google.se/?hl=sv 2021-02-21 1 Artifact Family: | Source: Safari 
Oversatt 11:10:56(UTC Account: 
+1) Service 
Source fee 
Repository Path: | Identifier: 
Google https://translate.google.se/?hl-sv&sl-auto&tl | 2021-02-21 1 Artifact Family: | Source: Safari 
Oversatt =en&text=guys%20have%20info%20about% | 11:11:24(UTC Account: 
20he%20farah%20fick%20h%C3%B6ra%20 | +1) S Service 
att%20han%200ch%20hans%20v%C3%A4n Gegen Path: | Identifier: 
ner%20%C3%A4r%20i% 20krig%20mot%20 epository Path: 
n%C3%A5rgra%20andra%20som%20bor%2 
0i%200m%C3%Aö5rdet%20mina%20V%C3% 
A4nner%20k%C3%A4nner%20dessa%20kill 
ar%20tror%20att%20de%20kan%20ta%20fr 
am%20farah%20men%20de%20%C3%A4r 
%20inte%20100%25%20leta%20efter%20ni 
%200cks%C3%A5%200m%20mer%20info% 
20&op=translate 
Google https://translate.google.se/?hl=sv&sl=auto&tl | 2021-02-21 1 Artifact Family: | Source: Safari 
Oversátt =en&op=translate 11:18:25(UTC Account: 
+1) S Service 
ource eg: 
Repository Path: | Identifier: 
Hyra bil - Boka |https://www.hertz.se/rentacar/reservation/?g | 2021-02-23 1 Artifact Family: | Source: Safari 
hyrbil direkt pa |clid=EAlalQobChMI9MeQ8eH- 01:37:11(UTC Account: 
nätet | Hertz 7glVj5KyCh3PRAh9EAAYASAAEGLND_D_ | +1) Source Service 
Biluthyrning BwE&gclsrc=aw.ds Repository Path: Identifier: 
Hyra bil - Boka |https://www.hertz.se/rentacar/reservation/?g | 2021-02-23 1 Artifact Family: | Source: Safari 
hyrbil direkt pa | clid=EAlalQobChMI9MeQ8eH- 01:39:48(UTC Account: 
nätet | Hertz  |7gIVj5KyCh3PRAh9EAAYASAAEgLND D | +1) Seis Service 
Biluthyrning BwE&gclsrc-aw.ds£vehicles Repository Path: Identifier: 
Sixt - S6k pa https://www.google.se/search?client=safari& | 2021-02-23 1 Artifact Family: | Source: Safari 
Google channel=iphone bm&source-hp&ei- 040YK | 01:40:36(UTC Account: 
rvBobSkwXK1764Dg&q-sixt&gs ssp-eJzj4t | +1) S Service 
TP1TcwyTY1NFJgNGBOYPBiKc6sKAEAMy Revost Path: | Identifier: 
UE7g&oq-six&gs Icp-ChFtb2JpbGUtZ3dzL epository Path: 
XdpeitocBABGAAyDgguELEDEMcBEKMCE 
JMCMggILHDHARCvATIFCC4QsQMyCAgu 
EMcBEK8BMglILjIFCAAQsQMyBQgAELED 
MgUILhCxAzoOCCkQsQMQxwEQowlQkwl6 
BQgpELEDOgUIKRCgAToCCCk6DQgpEMc 
BEKMCEEMQkwI6CwgpEMcBEK8BEJMCO 
gYIKRAWEB46CAgAELEDEIMBOg4ILhCxA 
XCDARDHARCjAjoL CCAQsQMQxwEQowl6 
CwguELEDEIMBEJMCOgIIADoLCC4QsQM 
QxwEQrwFQjRNY8BhgwCVoAHAAeACAAd 
gBiAGBBJIBBTAuMi4xmAEAoAEBSAEP&sc 
lientzmobile-gws-wiz-hp 
Offerselect https://www.sixt.se/php/reservation/offersele | 2021-02-23 Artifact Family: | Source: 
ct 01:46:20(UTC KnowledgeC 
*1) Account: 
Besen Path: | Service 
* | Identifier: 
Car Rental - https://www.europcar.com/en- 2021-02-23 1 Artifact Family: | Source: Safari 
Rent a new us?gclsrc=aw.ds&gclid=EAlalQobChMIqNysi | 03:13:55(UTC Account: 
Car & Van Pf- +1) S Service 
Worldwide | | 7gIVC9WyCh1yEwSQEAAYASAAEgJJcvD_ Repository Path: | Identifier: 
Europcar BwE&gclsrc=aw.ds epository Path: 
Select extras | | https://m.europcar.com/action/addExtras 2021-02-23 1 Artifact Family: | Source: Safari 
Europcar 03:22:42(UTC Account: 
+1) S Service 
ource ir 
Repository Path: | Identifier: 
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Hyra BI 
Snabbt pa 
Natet - Hyrbil 
till ett Bra Pris 
— Avis 


nttps7WWW.avis.Se/ ?KpId-site- 

google camp-1848901830 adgroup- 
69500277533 target-aud- 
531416943069:kwd-13402896 creative- 
346475790704 device-m feed- 
&gclid-EAlalQobChMIx4WTrvz- 


7glVw9myCh11egIcEAAYASAAEgJsr D Bw 
E 


-02-23 
03:35:37(UTC 
*1) 


Aruract Family: 


Source 


Repository Path: 


Identifier: 


Tillgangliga 
fordon 


https://secure.avis.se/car- 

results ?vehicleCategory=default&exclusiveS 
earch-&fccFallBackAwdCode-&fccRecg- &fr 
omSRP=&require-mobile- 
logout-&partnerBrand-&locationBrand-avis 
&dropLocationBrand=&budgetPickupLocCod 
e-&budgetDropoffLocCode-&hire- 
country-GB&hire- 
search=Stockholm+Bromma+flygplats+- 
+SWES&hire-location=BMA&station- 
type=airport&date- 

from=23%2F02%2F 2021 &time- 
from=1500&time-from-hours=15&time-from- 
minutes=00&return-search=&return- 
location=&return-station-type=airport&date- 
to=28%2F02%2F 2021 &time-to=1500&time- 
to-hours=15&time-to- 
minutes=00&hideAwdNumber=false&loactio 
nRemarkList=&hideAwdCodeAndMessage=f 
alse&yds- 
applicable=1&dd=&yy=&mm=&awdcode=&re 
ntalPeriod=5&driverDob=&isUasorSds= 


2021-02-23 
03:36:45(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Booking.com : 
Hotell i 
Karlstad . Boka 
hotell nu! 


https://www.booking.com/searchresults.sv.ht 
ml?src=index&rows=20&error_url=https%3A 
%2F%2Fwww.booking.com%2Findex.sv.htm 
I%3Flabel%3Dgen173nr- 
1DCAEoggl46AdIM1gEaMgBiAECmAEIUAE 
HyAEN2AED6AEBiAIBgAIDuAKI6t2BBsACA 
dICJDJjNj|QZMTEyLTIkYWUtNDYzOC1iMDI 
mLTU3Y2EzOWZjNmMANtgCBOACAQ963B 
sid%3Dcb602dccc0a7647ccb33ac1440501f 
9a%3Bsb_price_type%3Dtotal%26%3B&lab 
el=gen173nr- 
1DCAEoggl46AdIM1gEaMgBiAECmAEIuAE 
HyAEN2AED6AEBiAIBgAIDuAKI6t2BBsACA 
dICJDJJNJQZMTEyLTIKYWUINDYZOC1iMDI 
mLTU3Y2EZOWZjNmM4NtgCBOACAQ8sid 
=cb602dccc0a7647ccb33ac1440501f9a&sb 
=1&sb Ip=1&search form id=cec84653387 
b0036&checkin monthday=25&checkin yea 
r_month=2021- 
2&checkout_monthday=26&checkout_year_ 
month=2021-2&checkin=2021-02- 
25&checkout=2021-02- 

268group adults=4&group children=0&no r 
ooms-2&group adults overlay=4&group ch 
ildren overlay=0&no rooms overlay=2&lpsr 
=1&dest type=city&dest id=- 

2493635&ss raw=kar&ss label=Karlstad%2 
C+V%C3%AA4rmland%2C+Sverige&place id 
_lon=13.500731&place_id_lat=59.379671&a 
c_position=0&ac_suggestion_list_length=5& 
ac_langcode=sv&search_selected=true&ac 
size=58ac_click_type=b8latitude=59.379671 
&longitude=13.500731&search_pageview_id 
=cec84653387b0036 


2021-02-25 


11:00:47(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Best Western 
Gustaf Froding 
Hotel & 
Konferens i 
Karlstad — 
uppdaterade 
priser för 2021 


https://www.booking.com/hotel/se/best- 
western-gustaf-froding-hotell- 
konferens.sv.html?label=gen173nr- 
1DCAEoggl46AdIM1gEaMgBiAECmAEIUAE 
HyAEN2AED6AEBIAIBGAIDuAKI6t2BBSACA 
dICJDJjNjOzMTEyLTIKYWUtNDYzOC1iMDI 
mLTU3Y2EZOWZjNmM4NtgCBOACAQ;sid= 
cb602dccc0a7647ccb33ac1440501f9a;all sr 
blocks=1843619 264821228 2 1 0%2C1 


843619 264821228 2 1 O;checkin=2021- 
02-25;checkout=2021-02-26;dest id=- 
2493635:dest type=city;dist=0;group adults 
=4;group children=0;hapos=4;highlighted bl 
ocks=1843619 264821228 2 1 0%2C1843 
619 264821228 2 1 O;hpos-4;matching bl 
ock_id=1843619 264821228 2 1 O:no roo 
ms=2;ref is wiiren adults-4;req children 
70; roomT: =A%2CA;room2=A%2CA;sb_price 
_type=total;sr_order=popularity;srepoch=161 
4247247; :srpvidz a9644667bb1b0080;type=to 


tal;ucfs=1& 


2021-02-25 
11:01:20(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Bekräftelse - 
Booking.com 


https://secure.booking.com/confirmation.sv.h 
tml?label=gen1 73nr- 
1DCAEoggl46AdIM1gEaMgBiAECmAEIUAE 
HyAEN2AEDGAEBIAIBqAIDuAKIGt2BBsACA 
dICJDJjNjOzMTEyL TIFYWUtNDYzOC1iMDI 
mLTU3Y2EzOWZjNmMANtgCBOACAQ:;sid- 
cb602dccc0a7647ccb33ac1440501f9a;auth ` 
key=rZPn3J4Y3F3AgQn2;bp travel purpose 
=leisure;hostname=www.booking.com;sourc 
e=book;ua_created=0& 


2021-02-25 
11:06:42(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Bekräftelse - 
Booking.com 


https://secure.booking.com/confirmation.sv.h 
tml?label=gen173nr- 
1DCAEoggl46AdIM1gEaMgBiAECmAEIUAE 
HyAEN2AEDGAEBIAIBqAIDuAKIGt2BBsACA 
dICJDJjNjOzMTEyL TIYWUtNDYzOC1iMDI 
mLTU3Y2EzOWZjNmMANtgCBOACAQ:;sid- 
cb602dccc0a7647ccb33ac1440501f9a;auth ` 
key=rZPn3J4Y3F3AgQn2;bp travel purpose 
=leisure;hostname=www.booking.com;sourc 
e-book;ua created-0& 


2021-02-25 
11:06:50(UTC 
*1) 


Artifact Family: 


Source 


Repository Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


32 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


Data Files (1) 


Documents (1) 


11BEBE49-2BDF-4872-8D8B- 
8CA0A6TAF690.pdf 
373fd2e35eced361b8ff2ca4a54ab4207f 
a93345_files_full.zip/private/var/mobile/ 
Containers/Data/Application/06B4B7A0- 
A991-4F2E-B94A- 
D6285790191B/tmp/11BEBE49-2BDF- 
4872-8D8B-8CA0A61AF690.pdf 


fde4b53024c5eba28216eebe8931e2f7 


Size (bytes): 
Created: 
Modified: 
Accessed: 


200720 


2021-02-18 16:34:10(UTC+1) 
2021-02-18 16:34:10(UTC+1) 
2021-02-18 16:34:10(UTC+1) 


2023-10-06 


09:52:36 


2023-10-06 
09:52:36 


From: 2020-02-17 00:00:00 |Missed Source: Facebook Messenger 
100046341096779 11:29:33(UTC+1) Account: 1517356926 
Patric Malko 
To: 
1517356926 
Pontus Biscaard 
Direction: 
Incoming 

2 Call Log Evidence 2023-10-06 2023-10-06 

09:52:38 09:52:38 = 


From: 
We 49 
Valentina * 
Direction: 


Incoming 


2021-02-13 Answered 


00:34:18(UTC+1) 


Unknown 
network 
(Sweden)* 


Source: FaceTime 


2023-10-06 
09:52:39 


2023-10-06 
09:52:39 


From: 2021-02-13 00:49:08 | Answered | se Network Yes | Source: FaceTime Yes 
E — 49 00:44:50(UTC+1) Name: 
Valentina * Unknown 
EP eee network 
GE (Sweden)* 
4 Call Log Evidence 2023-10-06 2023-10-06 
09:52:39 09:52:39 = 


To: 2021-02-13 00:01:20 |Answered |se Network Yes | Source: FaceTime Yes 
KT ` ` HES 01:35:54(UTC+1) Name: 
Valentina * Unknown 
Direction: no * 
Outgoing (Sweden) 
5 Call Log Evidence 2023-10-06 2023-10-06 
09:52:40 09:52:40 ^ 


rom: 2021-02-13 00:26:52 |Answered |se Network Yes | Source: FaceTime Yes 
E O 01:39:43(UTC+1) Name: 
Valentina * Unknown 
eps bak] network 
Dan (Sweden)* 
6 Call Log Evidence 2023-10-06 2023-10-06 
09:52:45 09:52:45 a 


| Bilaga 1. Calls mm, 2023-11-01 14:47  diarienr: 5000-K189802-21 201 
Fro 2021-02-15 UU:UU:UU d Yes Source: WhatsApp 
4679022366205. whats | 13:27:21(UTC+1) answere Account: 46790223662@s.whats PPEEMLIG | 
a GE MI IC 
Nabas 
252615192542@s.what 
sapp.net 
Direction: 
Outgoing 
7 Call Log Evidence 2023-10-06 2023-10-06 
09:52:48 09:52:48 = 
From: 2021-02-15 00:00:00 |Not Yes | Source: WhatsApp 
46790223662@s.whats | 13:27:52(UTC+1) answered Account: 46790223662@s.whatsapp.net 
app.net 
Mahad 
To: 
252615245172@s.what 
sapp.net 
Direction: 
Outgoing 
8 Call Log Evidence 2023-10-06 2023-10-06 
09:52:48 09:52:48 = 
From: 2021-02-16 00:21:24 | Answered |se Network Yes | Source: FaceTime Yes 
+46704336449 00:31:12(UTC+1) Name: 
Valentina * Unknown 
ae: network 
Ge (Sweden)* 
9 Call Log Evidence 2023-10-06 2023-10-06 
09:52:49 09:52:49 = 
From: 2021-02-16 00:00:00 |Not Yes | Source: WhatsApp 
46790223662@s.whats | 14:01:58(UTC+1) answered Account: 46790223662@s.whatsapp.net 
app.net 
Mahad 
To: 
252615192542@s.what 
sapp.net 
Direction: 
Outgoing 
10 |Call Log Evidence 2023-10-06 2023-10-06 
09:52:49 09:52:49 a 


: 2021-02-16 00:06:51 |Answered Source: WhatsApp 
46790223662@s.whats | 14:02:12(UTC+1) Account: 46790223662@s. whatsapp.net 
app.net 
Mahad 
To: 
252615192542@s.what 
sapp.net 
Direction: 
Outgoing 
11 [Call Log Evidence 2023-10-06 2023-10-06 
09:52:51 09:52:51 a 


From: 
252615192542@s.what 
Sapp. net 


To: 
46790223662@s. whats 
app.net 
Mahad 


Direction: 
Incoming 


2021-02-17 
16:52:39(UTC+1) 


00:00:00 | Missed 


Source: WhatsA 


Account: 46790223662@s.whatsapp.net 


12  |Call Log 


Evidence 


2023-10-06 
09:52:52 


2023-10-06 
09:52:52 


From: 2021-02-17 00:00:00 |Not Source: WhatsApp 
46790223662@s.whats | 17:07:29(UTC+1) answered Account: 46790223662@s.whatsapp.net 
app.net 
Mahad 
To: 
252615192542@s.what 
sapp.net 
Direction: 
Outgoing 
13  |Call Log Evidence 2023-10-06 2023-10-06 
09:52:53 09:52:53 = 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


202 


From: 
467 74 @s. whats 
app.net 

les secrets de la vie 


To: 
46790223662@s.whats 
app.net 

Mahad 


Direction: 
Incoming 


2021-02-18 
12:51:56(UTC+1) 


00:00:00 | Missed 


Source: WhatsApp 
Account: 46790223662@s.whatsapp.net 


14  |Call Log 


Evidence 


2023-10-06 
09:53:32 


2023-10-06 
09:53:32 


| PI 


From: 

46790223662 (9s.whats 
app.net 

Wales 


Eos. whats 


app.net 
les secrets de la vie 


Direction: 
Outgoing 


2021-02-18 
14:05:14(UTC+1) 


00:00:00 |Rejected 


Source: WhatsApp 
Account: 46790223662@s.whatsapp.net 


15  |Call Log 


Evidence 


2023-10-06 
09:53:34 


2023-10-06 
09:53:34 


From: 

HS ` ` 4 @s.whats 
app net 

E secrets de la vie 


46790223662@s. whats 
app.net 

Mahad 

Direction: 

Incoming 


2021-02-18 
14:13:37(UTC+1) 


00:02:15 |Answered 


Source: WhatsApp 


pp 
Account: 46790223662@s.whatsapp.net 


16  |Call Log 


Evidence 


2023-10-06 
09:53:36 


2023-10-06 
09:53:36 


: 2021-02-18 00:00:54 | Answered |se Network Yes | Source: FaceTime 
0708922241 15:02:21(UTC+1) Name: 
Mamma* Unknown 
Direction: network * 
Outgoing (Sweden) 
17  |Call Log Evidence 2023-10-06 2023-10-06 
09:53:37 09:53:37 a 


46774 @s.whats 


app.net 
ES secrets de la vie 


4679022366205, whats 
app.net 

Mahad 

Direction: 

Incoming 


2021-02-18 
16:55:22(UTC+1) 


00:00:00 |Missed 


Source: WhatsA 


Account: 46790223662@s.whatsapp.net 


18  |Call Log 


Evidence 


2023-10-06 
09:53:38 


2023-10-06 
09:53:38 


¿67M 40 @s.whats 
app.net 
als 


4079022060205 whats 
app.net 
Mahad 


Direction: 
Incoming 


2021-02-19 
02:59:41(UTC+1) 


00:00:00 |Missed 


Source: WhatsA| 


Account: 46790223662@s.whatsapp.net 


Yes 


19 |Call Log 


Evidence 


2023-10-06 
09:53:38 


2023-10-06 
09:53:38 


| P 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 203 


46/90223662Qs whats. | 02:59:45(UTC1) = Account: 107 00223662005.wh 7 
LA s.whats :59:45 br ccount: 467 s.whatgap LIG | 
cm IG 
Mahad 
To: 
Hen ` 94905 whats 
app.net 
Valentina 
Direction: 
Outgoing 
20  |CallLog Evidence 2023-10-06 2023-10-06 
09:53:39 09:53:39 e 
From: 2021-02-19 00:08:56 | Answered Source: WhatsApp 
10A Oe whats | 03:00:01(UTC 1) Account: 46790223662@s.whatsapp.net 
app.net 
Valentina 
To: 
46790223662@s.whats 
app.net 
Mahad 
Direction: 
Incoming 
21 Call Log Evidence 2023-10-06 2023-10-06 
09:53:39 09:53:39 = 


From: 2021-02-19 00:00:00 |Not Source: WhatsApp 
46790223662@s.whats | 04:01:21(UTC+1) answered Account: 46790223662@s.whatsapp.net 
app.net 
Mahad 


To: 
252615192542@s.what 
sapp.net 


Direction: 
Outgoing 


2023-10-06 2023-10-06 
09:53:40 09:53:40 


From: 2021-02-19 00:00:58 | Answered Source: WhatsApp 
10 E74 @s.whats | 13:32:25(UTC+1) Account: 46790223662@s.whatsapp.net 
app.net 
les secrets de la vie 
To: 
46790223662@s.whats 
app.net 
Mahad 
Direction: 
Incoming 
23  |CallLog Evidence 2023-10-06 2023-10-06 
09:53:42 09:53:42 = 
From: 2021-02-19 00:00:00 |Missed Source: WhatsApp Yes 
10 S@s.whats | 20:14:46(UTC+1) Account: 46790223662@s.whatsapp.net 
app.net 
Valentina 
To: 
46790223662@s.whats 
app.net 
Mahad 
Direction: 
Incoming 
24  |Call Log Evidence 2023-10-06 2023-10-06 
09:53:43 09:53:43 a 
From: 2021-02-19 00:00:00 | Rejected Source: WhatsApp Yes 
46790223662@s.whats | 20:22:25(UTC+1) Account: 46790223662@s.whatsapp.net 
app.net 
Manag 
mmm, whats 
app.net 
Valentina 
Direction: 
Outgoing 
25  |CallLog Evidence 2023-10-06 2023-10-06 
09:53:43 09:53:43 + 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


From: 
10-8905 whats 
app.net 

Valentina 


0: 
46790223662@s.whats 
app.net 
Mahad 


Direction: 
Incoming 


2021-02-19 
20:27:33(UTC+1) 


204 


UU:U3:38 


Source: WhatsApp 


Account: 46790223662 (9s.what: 


CHEMLIG | 


26  |CallLog 


Evidence 


2023-10-06 
09:53:44 


2023-10-06 
09:53:44 + 


From: 


1000 9 @s. whats 
app.net 
Valentina 


To: 
46790223662@s.whats 
app.net 

Mahad 

Direction: 

Incoming 


2021-02-19 
23:00:07(UTC+1) 


00:00:00 | Missed 


Source: WhatsA 


Account: 46790223662@s.whatsapp.net 


Yes 


27  |CallLog 


Evidence 


2023-10-06 
09:53:45 


2023-10-06 
09:53:45 = 


rom: 
46790223662@s.whats 
app.net 
Mahad 


To: 

46749 @s.whats 
app.net 

Valentina 

Direction: 

Outgoing 


2021-02-19 
23:00:47(UTC+1) 


00:10:30 |Answered 


Yes 


Source: WhatsA 


Account: 46790223662@s.whatsapp.net 


Yes 


28 |Call Log 


Evidence 


2023-10-06 
09:53:45 


2023-10-06 
09:53:45 = 


From: 

4049 @s.whats 
app.net 

Valentina 


To: 
46790223662@s.whats 
app.net 

Mahad 


Direction: 
Incoming 


2021-02-19 
23:11:24(UTC+1) 


00:13:42 |Answered 


Source: WhatsA 


Account: 46790223662@s.whatsapp.net 


Yes 


29 |Call Log 


Evidence 


2023-10-06 
09:53:45 


2023-10-06 
09:53:45 5 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 
AC Oe whats 
app. net 

Valentina 

Direction: 

Outgoing 


2021-02-19 
23:58:52(UTC+1) 


00:19:28 |Answered 


Source: WhatsA 


Account: 46790223662@s.whatsapp.net 


Yes 


30 =| Call Log 


Evidence 


2023-10-06 
09:53:48 


2023-10-06 
09:53:48 £ 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 
252615192542@s.what 
sapp.net 


Direction: 
Outgoing 


2021-02-20 
01:45:11(UTC+1) 


00:00:00 | Not 
answered 


Source: WhatsApp 


Account: 46790223662@s.whatsapp.net 


31 Call Log 


Evidence 


2023-10-06 
09:53:55 


2023-10-06 
09:53:55 5 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 
1072994905 whats 
app.net 

Valentina 

Direction: 

Outgoing 


2021-02-20 
02:13:43(UTC+1) 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


205 


UU:Z9:37 


Source: WhatsApp 


pp 
Account: 46790223662 (9s.what: 


CHEMLIG | 


32  |Call Log 


Evidence 


2023-10-06 
09:53:57 


2023-10-06 
09:53:57 


| P 


From: 


HS ` ` 4 @s.whats 
app net 
les secrets de la vie 


To: 
46790223662@s.whats 
app.net 

Mahad 

Direction: 

Incoming 


2021-02-20 
14:50:10(UTC+1) 


00:22:06 |Answered 


Source: WhatsA 


Account: 46790223662@s.whatsapp.net 


33  |Call Log 


Evidence 


2023-10-06 
09:54:00 


2023-10-06 
09:54:00 


From: 
252615192542@s.what 
sapp. net 


To: 
46790223662@s. whats 
app.net 
Mahad 


Direction: 
Incoming 


2021-02-20 
17:18:33(UTC+1) 


00:00:00 |Missed 


Source: WhatsApp 


Account: 46790223662@s.whatsapp.net 


2023-10-06 
09:54:55 


2023-10-06 
09:54:55 


From: 2021-02-21 05:26:20 |Answered |se Network Source: FaceTime 
+46 73 04:35:39(UTC+1) Name: 
+46 TESI Unknown 
AEE network 
ep (Sweden)* 
35  |CallLog Evidence 2023-10-06 2023-10-06 
09:54:57 09:54:57 a 


46790223662@s.whats 
app.net 
Mahad 


To: 

46749 @s.whats 
app.net 

Valentina 

Direction: 

Outgoing 


2021-02-21 
14:00:28(UTC+1) 


00:11:14 |Answered 


Source: WhatsApp 


Account: 46790223662@s. whatsapp.net 


36  |Call Log 


Evidence 


2023-10-06 
09:54:57 


2023-10-06 
09:54:57 


46799 @s.whats 
app.net 
valentina 


4679022366205, whats 
app.net 

Mahad 

Direction: 

Incoming 


2021-02-21 
19:26:46(UTC+1) 


00:05:12 |Answered 


Source: WhatsApp 


Account: 4679022366205. whatsapp.net 


37 


2023-10-06 
09:54:58 


2023-10-06 
09:54:58 


To: 
f5b5c135-837d-52b2- 
9e84-bfc8883d4ddd 
Huskooo 


Direction: 
Outgoing 


2021-02-21 
20:24:16(UTC+1) 


00:00:24 |Answered 


Source: Snapchat 


Call Log Evidence ZUZ3-TU-UG e 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
38 = 
09:54:59 


To: 2021-02-21 00:00:20 |Answered 
f5b5c135-837d-52b2- 20:25:10(UTC+1) 


9e84-bfc8883d4ddd 


Source: Snapchat 


Huskooo 
Direction: 
Outgoing 
39  |CallLog Evidence 2023-10-06 2023-10-06 
09:55:05 09:55:05 = 
From: 2021-02-21 00:00:09 |Answered Source: Snapchat 


f5b5c135-837d-52b2- 20:41:07(UTC+1) 
9e84-bfc8883d4ddd 


Huskooo 
Direction: 
Incoming 
40 Cell Log Evidence 2023-10-06 2023-10-06 
09:55:06 09:55:06 = 
From: 2021-02-21 00:00:10 |Answered Source: Snapchat 
8766d802-47ac-5833- 20:58:44(UTC+1) 
8c9a-37c360670914 
Mike Milton 
Direction: 
Incoming 
41 Call Log Evidence 2023-10-06 2023-10-06 
09:57:06 09:57:06 + 


From: 2021-02-22 00:00:00 | Missed Source: WhatsApp 
467 4@s.wnats | 13:16:06(UTC+1) Account: 46790223662 @s.whatsapp.net 
app.net 

les secrets de la vie 


To: 
46790223662@s.whats 
app.net 

Mahad 

Direction: 

Incoming 


2023-10-06 2023-10-06 
09:57:11 09:57:11 


From: 2021-02-22 Answered Source: WhatsApp 
10 NA 9 2s. whats | 16:16:52(UTC 1) Account: 46790223662@s.whatsapp.net 
app.net 

Valentina 


To: 
46790223662@s.whats 
app.net 

Mahad 

Direction: 

Incoming 


Call Log Evidence 2023-10-06 2023-10-06 
09:57:15 09:57:15 = 


2021-02-22 00:00:03 |Answered Network 


To: 
0708922241 


17:29:48(UTC+1) Name: 
Mamma* Unknown 
E network 
Direction: (Sweden)* 


Outgoing 


44 Cell Log Evidence 2023-10-06 2023-10-06 
09:57:19 09:57:19 = 
From: 2021-02-22 00:00:00 |Missed se Network 
0708922241 18:40:10(UTC+1) Name: 
Mamma* Unknown 
iracton: network 
pakana (Sweden) 


2023-10-06 2023-10-06 
09:57:39 09:57:39 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


From: 
10894905. whats 
app.net 

u 


4679022366205, whats 
app.net 
Mahad 


Direction: 
Incoming 


2021-02-23 
12:36:50(UTC+1) 


207 


| 


Source: WhatsApp 
Account: 46790223662@s.whats 


46  |Call Log 


Evidence 


2023-10-06 
09:57:41 


2023-10-06 
09:57:41 H 


From: 


46749 @s. whats 
app.net 
Valentina 


To: 
46790223662@s.whats 
app.net 

Mahad 

Direction: 

Incoming 


2021-02-23 
12:36:54(UTC+1) 


00:00:00 | Missed 


Yes 


Source: WhatsApp 
Account: 46790223662@s.whatsapp.net 


47  |CallLog 


Evidence 


2023-10-06 
09:57:43 


2023-10-06 
09:57:43 


| à 


From: 

Hen ` 4 @s. whats 
app.net 

les secrets de la vie 


To: 
46790223662@s.whats 
app.net 

Mahad 

Direction: 

Incoming 


2021-02-23 
12:40:00(UTC+1) 


00:18:23 | Answered 


Source: WhatsApp 
Account: 46790223662@s.whatsapp.net 


48  |Call Log 


Evidence 


2023-10-06 
09:58:00 


2023-10-06 
09:58:00 


| a 


To: 
0708922241 
Mamma* 


Direction: 
Outgoing 


2021-02-23 
13:24:38(UTC+1) 


00:04:34 |Answered |se Network 
Name: 
Unknown 
network 


(Sweden)* 


Source: Yes 


49  |Call Log 


Evidence 


2023-10-06 
09:58:10 


2023-10-06 
09:58:10 


From: 

46790223662 (gs.whats 
app.net 

Mahad 


To: 
46749 @s. whats 
app.net 

Valentina 

Direction: 

Outgoing 


2021-02-23 
14:31:35(UTC+1) 


00:02:56 |Answered 


Yes 


Source: WhatsA\ 
Account: 46790223662@s.whatsapp.net 


50  |CallLog 


Evidence 


2023-10-06 
09:58:22 


2023-10-06 
09:58:22 


| P 


16 "EN @s.whats 
app.net 
Valentina 


To: 
46790223662@s.whats 
app.net 

Mahad 


Direction: 
Incoming 


2021-02-23 
16:59:25(UTC+1) 


00:01:26 |Answered 


Source: WhatsApp 
Account: 46790223662@s. whatsapp.net 


51 Call Log 


Evidence 


2023-10-06 
09:58:27 


2023-10-06 
09:58:27 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 
1072899905 whats 
app.net 

Valentina 

Direction: 

Outgoing 


2021-02-23 
17:26:28(UTC+1) 


208 


I 


Source: WhatsApp 
Account: 46790223662@s.whats 


52  |Call Log 


Evidence 


2023-10-06 2023-10-06 
09:58:30 09:58:30 e 


From: 


1/0/2894 0 @s.whats 
app.net 
Valentina 


To: 
46790223662@s.whats 
app.net 

Mahad 

Direction: 

Incoming 


2021-02-23 
17:36:49(UTC+1) 


00:04:32 |Answered 


Yes 


Source: WhatsApp 
Account: 46790223662@s.whatsapp.net 


53  |CallLog 


Evidence 


2023-10-06 2023-10-06 
09:58:38 09:58:38 = 


From: 

Hen ` ` / 91 @s.whats 
app.net 

*46 7| 


To: 
46790223662@s.whats 
app.net 

Mahad 

Direction: 

Incoming 


2021-02-23 
18:01:51(UTC+1) 


00:00:41 |Answered 


Source: WhatsApp 
Account: 46790223662@s.whatsapp.net 


54  |Call Log 


Evidence 


09:59:18 09:59:18 


2023-10-06 2023-10-06 | 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 

Eo — 9 1 @s.whats 
app.net 

+46 79 049 97 91 


Direction: 
Outgoing 


2021-02-23 
18:02:44(UTC+1) 


00:01:25 |Answered 


Source: WhatsApp 
Account: 46790223662@s.whatsapp.net 


55  |Call Log 


Evidence 


2023-10-06 2023-10-06 
09:59:23 09:59:23 = 


From: 


ACT 7 @s.whats 
anp net 


46790223662@s. whats 
app.net 

Mahad 

Direction: 

Incoming 


2021-02-23 
19:44:54(UTC+1) 


00:01:45 | Answered 


Source: WhatsA 
Account: 46790223662@s.whatsapp.net 


56  |CallLog 


Evidence 


2023-10-06 2023-10-06 
09:59:52 09:59:52 a 


467 9@s.whats 
app.net 
en 


46790223662@s. whats 
app.net 

Mahad 

Direction: 

Incoming 


2021-02-23 
20:33:06(UTC+1) 


00:00:00 | Missed 


Source: WhatsApp 
Account: 46790223662@s. whatsapp.net 


57 (Cell Log 


Evidence 


2023-10-06 2023-10-06 
09:59:54 09:59:54 + 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


209 


467902230020 hats |20 SSB UTC 1) SC er oe h 
LA s.whats :34: hr ccount: 467 s.whatgap LIG | 
cm IG 
Mahad 
To: 
Hen ` o @s.whats 
app.net 
Valentina 
Direction: 
Outgoing 
58 "Cell Log Evidence 2023-10-06 2023-10-06 
10:00:03 10:00:03 e 
To: 2021-02-24 00:00:00 |Not se Network Source: Yes 
0708922241 15:52:35(UTC+1) answered Name: 
Mamma* Unknown 
OR network 
Se (Sweden)* 
59 "Cal Log Evidence 2023-10-06 2023-10-06 
10:00:04 10:00:04 a 
From: 2021-02-24 00:01:02 |Answered |se Network Source: Yes 
0708922241 15:52:53(UTC+1) Name: 
Mamma* Unknown 
TM network 
Get (Sweden)* 
60 "Cell Log Evidence 2023-10-06 2023-10-06 
10:00:35 10:00:35 a 
From: 2021-02-25 00:00:00 |Missed |se Network Source: 
0708922241 14:31:32(UTC+1) Name: 
Mamma* Unknown 
Direction: Network * 
Incoming (Sweden) 
61 Call Log Evidence 2023-10-06 2023-10-06 
10:00:37 10:00:37 + 


From: 2021-02-25 00:00:00 |Missed |se Network Source: 
0749 22:02:20(UTC+1) Name: 
Valentina * Unknown 
Ee network 
miss (Sweden)* 
62  |CallLog Evidence 2023-10-06 2023-10-06 
10:00:38 10:00:38 a 


Valentina “ 


Direction: 
Incoming 


2021-02-25 
22:02:42(UTC+1) 


00:00:00 | Missed 


Unknown 
network 
(Sweden)* 


Call Log 


Evidence 


2023-10-06 
10:00:39 


2023-10-06 
10:00:39 


Valentina * 


Direction: 
Incoming 


2021-02-25 
22:02:57(UTC+1) 


00:00:00 | Missed 


Unknown 
network 
(Sweden)* 


2023-10-06 
10:00:45 


2023-10-06 
10:00:45 


From: 

E — 4 @s. whats 
app.net 

les secrets de la vie 


o: 
46790223662@s.whats 
app.net 
Mahad 
Direction: 

Incoming 


2021-02-26 
14:08:33(UTC+1) 


00:00:00 | Missed 


Source: WhatsApp 


Account: 46790223662@s.whatsapp.net 


65  |Call Log 


Evidence 


2023-10-06 
10:00:47 


2023-10-06 
10:00:47 = 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 210 


From: 2021-02-26 00:00:00 |Missed |se Network Source: 
Wé ` Hei 15:19:55(UTC+1) Name: 
Valentina * Unknown 
heer ae network 
Gene (Sweden)* 
66 | Contacts Evidence 2023-10-06 2023-10-06 
10:53:01 10:53:01 * 


Group: friends Username mahadmose 


Name: Mahadmose User ID: 
Source: Snapchat 


2023-10-06 2023-10-06 


10:53:25 10:53:25 
Name: Mamma User ID: 
Source: WhatsApp Id EOCBEC65-53BD-41D2- 
Account: A588- 
46790223662@s.wh 0327229C0BB4:ABPerson 
atsapp.net WhatsApp User Id 


46709394713@s.whatsapp.n 
et 


Phone: 
Home +46709394713 


Contacts Evidence 2023-10-06 2023-10-06 
10:53:26 10:53:26 
Name: Mamma Phone: 
Source: Recents +46708922241 
Contacts Evidence 2023-10-06 2023-10-06 
10:53:28 10:53:28 
Name: Mamma Created: User ID: 
2021-02-12 User ID EOCBEC65-53BD- 
23:47:30(UTC+1) 41D2-A588- 
0327229C0BB4:ABPerson 
Modified: 
2021-02-12 Phone: 
23:47:30(UTC+1) Home +46709394713 
Contacts Evidence 2023-10-06 2023-10-06 
10:53:29 10:53:29 
Name: Mamma Created: InteractionC: incoming 
2021-02-18 ve iD CCC77607-0E41- interaction count: 1 
14:52:48(UTC+1) 4712-8E21- InteractionC: incoming 
E88C235BC482:ABPerson interaction count: 5 
Modified: Identifier +46708922241 InteractionC: outgoing 
2021-02-18 interaction count: 5 
14:52:50(UTC+1) Phone: 
Home 0708922241 


71  |Contacts Evidence 2023-10-06 2023-10-06 
10:56:55 10:56:55 


Name: taxijakt Created: User ID: InteractionC: incoming 
Source: InteractionC | 2021-02-13 Identifier +4682945258 interaction count: 2 
10:08:56(UTC+1) 
2023-10-06 2023-10-06 
10:57:29 10:57:29 
Name: Valentina User ID About: Busy. 
Source: WhatsApp ld A2BASO34- E50E-4D41- 
Account: 995D-05A839046DA8 
46790223662@s.wh WhatsApp User Id 
atsapp.net 46704336449@s.whatsapp.n 
Photos: et 
467| 9- Push Name V 
1596298864 jpg 
Phone: 
Home +46 M9 


10:57:30 10:57:30 


Name: Valentina Phon 
Source: Recents m 


74  |Contacts Evidence 2023-10-06 2023-10-06 
10:57:31 10:57:31 + 


Contacts Evidence 2023-10-06 2023-10-06 ES 


43 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


Name: Valentina Created: User ID: InteractionC: incoming 

2021-02-17 User ID A2BA5034-E50E- interaction count: 6 

00:47:24(UTC+1) 4D41-995D-05A839046DA8 InteractionC: incoming 

interaction count: 17 

Modified: Phone: InteractionC: outgoing 

2021-02-17 Home +4679 interaction count: 117 

00:47:24(UTC+1) 

User Accounts Evidence 2023-1 0-06 2023-1 0-06 

Creation time Account 
2021-02-12 Description: 
19:41:54(UTC+1) iCloud 


Username: 


pon andOhotmail.com 


Service Type: 127B225E-BD11- 
4F92-8B8E-D9FB6F76198A 


Source: Accounts 


User Accounts Evidence 2023-10-06 2072371 0-06 
11:13:54 11:13:54 
Creation time Account 
2021-02-12 Description: 
19:41:49(UTC+1) Device Locator 


Username: 


pel ? @hotmail. com 


Service Type: D581A404-FE94- 
4D08-B346-B1FDFDDB3B28 


Source: Accounts 


User Accounts Evidence 2023-10-06 2023-10-06 
11:13:55 11:13:55 
Creation time Account 
2021-02-12 Description: 
19:41:54(UTC+1) IDMS 
Username: 


po and @hotmail.com 


Service Type: 02464211-FB70- 
4808-B0A7-ACF6A2DB3AED 


Source: Accounts 


User Accounts Evidence 2023-10-06 2023-10-06 
11:14:10 11:14:10 
Creation time Account 
2021-02-12 Description: 
19:41:55(UTC+1) Apple ID 
Username: 


MN and @hotmail.com 


Service Type: D83321D7-ABAA- 
4C9C-A534-E66312D63A13 


Source: Accounts 


User Accounts Evidence 2023-10-06 2023-10-06 
11:14:11 11:14:11 
Creation time Account 


Description: 


2021-02-12 
iTunes Store 


19:52:23(UTC+1) 
Username: 


pe 2 @hotmail. com 


Service Type: D315EB44-93E4- 
410A-8F11-E6059076BEA9 


Source: Accounts 


2023-10-06 
11:14:11 


2023-10-06 
11:14:11 


User Accounts 


È 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


Creation time 
2021-02-12 
20:13:29(UTC+1) 
Username: 


EEN ` ` nd @hotmail.com 


Service Type: 194B5D3E-0728- 
4BB3-A6FD-57D29FEFF145 


Source: Accounts 


81 User Accounts 


Evidence 


2023-10-06 
11:14:11 


2023-10-06 
11:14:11 + 


Creation time Account 
2021-02-12 Description: 
20:22:16(UTC+1) Cloudkit 
Username: 
EEN ` ` nd @hotmail.com 
Service Type: 5A38667F-6D4A- 
4473-A0E0-3228A4316934 
Source: Accounts 

82  |User Accounts Evidence 2023-10-06 2023-10-06 

11:14:13 11:14:13 a 

Creation time Account. 
2021-02-12 Description: 
20:24:08(UTC+1) Messages 
Username: 
pe? O hotmail.com 
Service Type: 4CF534D4-7C44- 
4CEF-8B7A-68066A03D28bE 
Source: Accounts 

83 User Accounts Evidence 2023-10-06 2023-10-06 

11:14:14 11:14:14 a 


Creation time 
Account Name: Mahad 


Source: WhatsApp 


User ID: 
WhatsApp User Id 
46790223662@s.whatsapp.net 


anvander 
WhatsApp. 


User Accounts 


Evidence 


2023-10-06 
11:14:18 


2023-10-06 
11:14:18 


Creation time 
Username: mahadmose 


Account Name: mahadmose 
Source: Instagram 


Photos: photo1.jpg 


User ID: 
Instagram Id 1050949595 


Profile Picture: 

Photo Url https://scontent-arn2- 
1.cdninstagram.com/v/t51.2885- 
19/s150x150/28157231_2072532 
109628182_85813638129621401 
6_n.jpg?_nc_ht=scontent-arn2- 
1.cdninstagram.com&_nc_ohc=Y 
Q9DJFUZFUW4AX8UnoUj&tp=1 &o 
h=013c3c0201712afc7e26fa97b7 
e160cd&oe-606189B5 


Biography: M.VD.T JM TG 


85 User Accounts 


Evidence 


2023-10-06 
11:14:20 


2023-10-06 
11:14:20 5 


Creation time 
Username: orte.n421 


Account Name: orte.n421 
Source: Instagram 


Photos: 


User ID: 
Instagram Id 45995202971 


Profile Picture: 

Photo Url https://scontent-sea1- 
1.cdninstagram.com/v/t51.2885- 
19/44884218 345707102882519 
. 2446069589734326272 n.jpg? 
nc ht-scontent-sea1- 
1.cdninstagram.com& nc ohc-8 
AUoZNYMPSIAX- 
Y52pR&oh-1d23d094e49f5d216e 
0d1859269337d1&oe-605FE68F 
&ig cache key-YW5vbnltb3VzX3 
Byb2ZpbGVfcGlj.2 


86 User Accounts 


Evidence 


2023-10-06 
11:14:36 


2023-10-06 
11:14:36 * 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 213 
Creation time 


User ID: 
Username: pon MM nc Instagram Id 217392203 HEMLIG 


Account Name: Pontus Profile Picture: 

Lindstrand Photo Url https://scontent-arn2- 
1.cdninstagram.com/v/t51.2885- 
19/s150x150/26157575 1445896 


Source: Instagram 72917481_297855711394660352 
.n.jpg? nc ht-scontent-arn2- 
Photos: photo1.jpg V uU RM CE 


IHxvu&tp-1&oh-eb7b2c44f296f8 
304adb5666f1c0064a&0e=60607 


013 
87 User Accounts Evidence 2023-10-06 2023-10-06 
11:14:41 11:14:41 a 
Creation time User ID: Birthday: 1996-10-24 22:00:00(UTC+0) 
Username: mahadmose4211 Deen ID ca10df2d-08df-4a1c-b8fe- 
96f409f9b03d 
Account Name: thugz Mansion 
Email: 
Email Address 
Source: Snapchat mahad_a496@hotmail.com 
Phone: 
Mobile Phone Number 
+46793349073 


Evidence 2023-10-06 2023-10-06 
12:12:32 12:12:32 a 


Balosaudi 2021-02-16 Bluetooth Address: Artifact Family: Source: 
23:19:38 Connectivity 9C:DF:03:BD:34:4F Service Identifier: 


HABA Source Repository 


Path: 


2023-10-06 2023-10-06 


Geen 12:12:32 12:12:32 
PASSAT GTR Unknown 2021-02-17 Bluetooth Address: Artifact Family: 
21:04:41 Connectivity 30:C3:D9:37:8E:86 SENE Identifier: 
nature: : 
Source Repository 
Detected Path: 
90 =| Device Evidence 2023-10-06 2023-10-06 

Connectivity 12:12:33 12:12:33 = 


Pins Free 2021-02-20 Bluetooth Address: Artifact Family: Source: 
16:18:28 Connectivity F4:4E:FC:A5:22:1F Service Identifier: 


nature: 5 
Detected Source Repository 


2023-10-06 2023-10-06 
12:12:33 12:12:33 


My Volvo Car Unknown 2021-02-25 Bluetooth Address: Artifact Family: Source: 
09:54:33 Connectivity 58:16:D7:4E:3D:51 Service Identifier: 
nature: : 
Source Repository 
Detected Path: 
Locations | Evidence 2023-10-06 2023-10-06 
12:46:08 12:46:08 
(59.307625, 18.076355) Description: Skanstull 


Time: 2021-02-14 06:04:01(UTC+1) 
Source: Safari 
Service Identifier: 


93  |Locations | Evidence 2023-10-06 2023-10-06 
12:53:29 12:53:29 S 


(59.364926, 17.974430) Time: 2021-02-16 21:42:05(UTC+1) 
Source: Safari 
Service Identifier: 


2023-10-06 2023-10-06 
12:53:30 12:53:30 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 214 
M99.37Z4T5, TS.UUS309) escription: Quality Hotel Friends, Solna, 5 E = 
Stockholms lan, Sverige HEMLIG | 


Name: Quality Hotel Friends 


Time: 2021-02-16 22:56:36(UTC+1) 
Source: Booking.com 
Service Identifier: 


95 | Locations Evidence 2023-10-06 2023-10-06 
14:20:47 14:20:47 5 


Description: eddie jobe 


Time: 2021-02-15 21:06:55(UTC+1) 
Source: KnowledgeC 
Service Identifier: 


96 =| Locations Evidence 2023-10-06 2023-10-06 
14:20:48 14:20:48 a 


Description: eddie jobe 


Time: 2021-02-15 21:06:56(UTC+1) 
Source: Safari 
Service Identifier: 


Locations 2023-10-06 2023-10-06 
14:20:49 14:20:49 


Description: eddie jobe 


Time: 2021-02-15 21:06:56(UTC+1) 
Source: Safari 
Service Identifier: 


98 | Locations Evidence 2023-10-06 2023-10-06 
14:20:49 14:20:49 


Description: eddie jobe 


Time: 2021-02-15 21:07:00(UTC+1) 
Source: Safari 
Service Identifier: 


99 Searched Items skanstull Evidence 2023-10-06 2023-10-06 
14:45:38 14:45:38 + 
2021-02-14 Safari skanstull Unknown 


06:03:18(UTC+1) 


100 |Searched Items Skanstull Evidence 2023-10-06 2023-10-06 
14:45:58 14:45:58 a 


2021-02-14 Safari Skanstull Unknown 
06:03:28(UTC+1) Position: (59.307625, 
18.076355) 
101  |Searched Items Skanstull, 118 60 Evidence 2023-10-06 2023-10-06 
Stockholm 14:46:01 14:46:01 a 


2021-02-14 Safari Skanstull, 118 60 Unknown 
06:03:29(UTC+1) Stockholm 
Position: (59.307625, 
18.076355) 
102 | Searched Items skanstull mc Evidence 2023-10-06 2023-10-06 
14:47:22 14:47:22 a 
2021-02-14 Safari skanstull mc Unknown 
06:04:34(UTC+1) 
103  |Searched Items skanstull öppet nu Evidence 2023-10-06 2023-10-06 
14:47:51 14:47:51 + 
2021-02-14 Safari skanstull öppet nu Unknown 


06:05:21(UTC+1) 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 215 


104 | Searched It kanstull öppet Evid 2023-10-06 102871 / m 
earched Items skanstull óppet nu vidence ME be EMLIG | 


2021-02-14 Unknown 


06:06:12(UTC+1) 


Safari skanstull öppet nu 


105 | Searched Items eddie jobe Evidence 2023-10-06 2023-10-06 
14:52:45 14:52:45 


2021-02-15 Safari eddie jobe Unknown 
19:40:25(UTC+1) 
106 |Searched Items eddie j Evidence 2023-10-06 2023-10-06 
14:52:54 14:52:54 e 
2021-02-15 Safari eddie j Unknown 
19:40:42(UTC+1) 
107 |Searched Items kva saltvik Evidence 2023-10-06 2023-10-06 
14:52:57 14:52:57 5 
2021-02-15 Safari kva saltvik Unknown 
22:07:06(UTC+1) 
108 | Searched Items häktet göteborg Evidence 2023-10-06 2023-10-06 
14:53:01 14:53:01 = 
2021-02-15 Safari häktet göteborg Unknown 
22:21:03(UTC+1) 
109 | Searched Items häktet göteborg adre Evidence 2023-10-06 2023-10-06 
14:53:21 14:53:21 5 


2021-02-15 KnowledgeC háktet góteborg adre Unknown 
22:21:20(UTC+1) 


2023-10-20 2023-10-20 


08:29:23 08:29:23 
Created: Title: 4595 kod Account: 127B225E-BD11-4F92-8B8E- 
2021-02-12 Source: Notes D9FB6F76198A 
23:48:07(UTC+1) Labels: 
Modified: Body: 4595 kod 
2021-02-12 Parties: 
23:48:11(UTC+1) 
111 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:46:25 08:46:25 = 
E-post -mahad —|https://outlook.live.com/mail/0/inbox/id/AQQKADA | 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook wATYwMAItZjlyADktMGUyNCOWMAItMDAKABA | 14:22:19(UTC+ Account: 
n 0, O, : 
ASNWMNvXEMEyZp9zOPic70Q%3D%3D 1) Source Repository pine a 
Path: B 
112 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:14 08:47:14 + 
E-post - mahad —|https://outlook.live.com/mail/0/inbox/id/AQQKADA | 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook wATYwMAItZjlyADktMGUyNCOWMAItMDAKABA | 14:22:19(UTC+ Account: 
ASNWMNvXEMEyZp9zOPic70Q%3D%3D/ 1) : Service 
Source Repository Identifier: 
113 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:14 08:47:14 + 
E-post -mahad  |https://outlook.live.com/mail/0/inbox/id/AQQKkADA | 2021-02-13 Artifact Family: Source: 
alii - Outlook wATYwMAItZjlyADktMGUyNCOWMAItMDAKABA | 14:22:20(UTC+ KnowledgeC 
i O, o . 
ASNWMNvXEMEyZp9zOPic70Q%3D%3D/ 1) Source Repository Account: 
Path: identifier: 
114 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:15 08:47:15 a 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


E-pos 
alii - Outlook 


| NUPS:770UTIOOK.IIVE.COM/Mall/U/INDOX 


2021-02-13 T 
14:22:26(UTC+ 
1) 


Artiract Family: 


Source Repository 
Path: 


identifier: 


115 |Web History 


E-post - mahad alii - Evidence 


Outlook 


2023-10-20 
08:47:15 


2023-10-20 
08:47:15 


E-post - mahad 
alii - Outlook 


https://outlook.live.com/mail/0/inbox/id/AQQKADA 
wATYwMAItZjlyADktMGUyNCOWMAItMDAKABA 
ASNWMNvXEMEyZp9zOPic70Q%3D%3D 


Web History 


2021-02-13 
14:22:32(UTC+ 
1) 


E-post - mahad alii - Evidence 


Outlook 


Artifact Family: 
Source Repository 


Path: 


2023-10-20 
08:47:16 


Source: Safari 
Account: 
Service 
Identifier: 


2023-10-20 
08:47:16 


E-post - mahad 
alii - Outlook 


https://outlook.live.com/mail/0/inbox/id/AQQkADA 
wATYwMAItZjlyADktMGUyNCOWMAItMDAKABA 
ASNWMNvXEMEyZp9zOPic70Q%3D%3D/ 


2021-02-13 
14:22:32(UTC+ 
1) 


Artifact Family: 


Source Repository 
Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Web History 


E-post - mahad alii - Evidence 


Outlook 


2023-10-20 
08:47:17 


2023-10-20 
08:47:17 


E-post -mahad —|https://outlook.live.com/mail/0/compose/AQMKAD | 2021-02-13 il Artifact Family: Source: Safari 
alii - Outlook AwATYwMAItZjlyADktMGUyNCOWMAItMDAKAE. | 14:22:34(UTC+ Account: 
YAAAO0kS5ikJG6RJgf5v73jwSYBwAM2nzdDOH | 1) S Repository | Service 
ET4F pPFPhZi3BAAACAQ8AAAAM2nzdDOHET4 ource Repository | identifier: 
FpPFPhZi3BAAQi4vpvAAAA Path: 
118 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:17 08:47:17 a 
E-post -mahad  |https://outlook.live.com/mail/0/compose/AQMKAD | 2021-02-13 Artifact Family: Source: 
alii - Outlook AwATYWMAItZjlyADktMGUyNCOWMAItMDAKAE | 14:22:35(UTC+ KnowledgeC 
YAAAO0kS5ikJG6RJgf5v73jwSYBwAM2nzdDOH | 1) s Repository | Account: 
ET4FpPFPhZi3BAAACA@8AAAAM2nzdDOHET4 Pan epository | Service 
FpPFPhZi3BAAQi4vpvAAAA ath: Identifier: 
119 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:19 08:47:19 = 


E-post - mahad 


https://outlook.live.com/mail/O/inbox/id/AQQKADA 


2021-02-13 


Artifact Family: 


Source: Safari 


alii - Outlook wATYwMAItZjlyADktMGUyNCOWMAItMDAKABA | 14:22:38(UTC+ Account: 
Å Aa A 
ASNWMNvXEMEyZp9zOPic70Q%3D%3D 1) Source Repository ee : 
Path: entifier: 
Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:19 08:47:19 
E-post -mahad —|https://outlook.live.com/mail/0/inbox 2021-02-13 Artifact Family: Source: Safari 
alii - Outlook 14:22:42(UTC+ Account: 
1) ; Service 
Source Repository | identifier 
Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:20 aT: 
E-post -mahad —|https://outlook.live.com/mail/0/inbox/id/AQQKADA | 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook wATYwMAItZjlyADktMGUyNCOWMAItMDAKABA | 14:34:07(UTC+ Account: 
Å an, e 
ASNWMNvXEMEyZp9zOPic70Q%3D%3D 1) Source Repository oe a 
Path: entifier: 
122 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:20 08:47:20 = 
E-post -mahad | https://outlook.live.com/mail/0/inbox 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook 14:34:08(UTC+ Account: 
1) ; Service 
Source Repository | Identifier: 
123 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 


Outloo! 


08:47:22 


08:47:22 


E-post -mahad  |https://outlook.live.com/mail/0/inbox 2021-02-13 Artifact Family: Source: 
alii - Outlook 14:34:15(UTC+ KnowledgeC 
1) i ccount: 
Source Repository Service 
i Identifier: 
124 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 


Outloo 


08:47:22 


08:47:22 


E-post- 
alii - Outlook 


wATYWMAItZjlyADKtMGUyNCOwMAItMDAKABA 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


ASNWMNvXEMEyZp9zOPic70Q%3D%3D 


2021-02-13 
cea 


Artiract Family: 


Source Repository 
Path: 


Identifier: 


125 [Web History 


E-post - mahad alii - 
Outlook 


Evidence 


2023-10-20 
08:47:22 


2023-10-20 
08:47:22 


E-post - mahad 
alii - Outlook 


https://outlook.live.com/mail/0/inbox/id/AQQkADA 
wATYwMAItZjlyADktMGUyNCOwWMAItMDAKABA 
ASNWMNvXEMEyZp9zOPic70Q%3D%3D/ 


Web History 


2021-02-13 
won 


E-post - mahad alii - 
Outlook 


Evidence 


Artifact Family: 


Source Repository 
Path: 


2023-10-20 
08:47:23 


Source: Safari 
Account: 
Service 
Identifier: 


2023-10-20 
08:47:23 


E-post -mahad  |https://outlook.live.com/mail/0/compose/AQMKAD | 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook AwATYwMAItZjlyADktMGUyNCOWMAItMDAKAE | 14:35:00(UTC+ Account: 
YAAAOOKS5ikJGERJgfSv7 3jwSYBwAM2nzdDOH | 1) S R it Service 
ET4F pPFPhZi3BAAACAQ8AAAAM2nzdDOHET4 ource Repository | identifier: 
FpPFPhZi3BAAQi4vpwAAAA Path: 
127 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:24 08:47:24 a 
E-post -mahad —|https://outlook.live.com/mail/O/inbox/id/AQQKADA | 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook wATYwMAItZjlyADktMGUyNCOWMAItMDAKABA | 14:35:03(UTC+ Account: 
ASNWMNvXEMEyZp9zOPic70Q%3D%3D 1) å Service 
ES Repository Identifier: 
128 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:25 08:47:25 4 
E-post - mahad |https://outlook.live.com/mail/0/inbox 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook 14:35:05(UTC+ Account: 
1 ) ` Service 
lag Repository Identifier: 
129 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:26 08:47:26 + 


E-post -mahad —|https://outlook.live.com/mail/0/inbox/id/AQQKADA | 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook wATYWMAItZjlyADktMGUyNCOWMAItMDAKABA | 14:35:09(UTC+ Account: 
ASNWMNvXEMEyZp9zOPic70Q%3D%3D 1) : Service 
Source Repository Identifier: 
130 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:27 08:47:27 + 


E-post -mahad  |https://outlook.live.com/mail/O/compose/AQMKkAD | 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook AwATYwMAItZjlyADktMGUyNCOWMAItMDAKAE | 14:35:14(UTC+ Account: 
YAAAOOKS5ikJGERJgfSv7 3jwSYBwAM2nzdDOH | 1) " Service 
ET4FpPFPhZi3BAAACAQ8AAAAM2nzdDOHET4 Source Repository | Identifier: 
FpPFPhZi3BAAQi4vpxAAAA Path: 
131 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Qutlook 08:47:27 08:47:27 = 


E-post -mahad  |https://outlook.live.com/mail/O/inbox/id/AQQKkADA | 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook wATYWMAItZjlyADktMGUyNCOWMAItMDAKABA | 14:35:16(UTC+ Account: 
Å eng à 
ASNWMNvXEMEyZp9zOPic70Q%3D%3D 1) Source Repository Barvice , 
Path: ener 
132 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:27 08:47:27 a 


E-post -mahad  |https://outlook.live.com/mail/O/compose/AQMKkAD | 2021-02-13 d Artifact Family: Source: Safari 
alii - Outlook AwATYwMAItZjlyADktMGUyNCOWMAItMDAKAE | 14:35:30(UTC+ Account: 
YAAAOOKS5IkJGERJgf5v7 3jwSYBWAM2nzdDOH | 1) S RI Service 
ET4FpPFPhZi3BAAACAQ8AAAAM2nzdDOHET4 ource Repository | Identifier: 
FpPFPhZi3BAAQi4vpyAAAA Path: 
133 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 


Outloo! 


08:47:28 


08:47:28 


E-post -mahad  |https://outlook.live.com/mail/O/inbox/id/AQQkADA | 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook wATYwMAItZjlyADktMGUyNCOWMAItMDAKABA | 14:35:40(UTC+ Account: 
| Aa A 
A5NWMNvXEMEyZp9zOPic70Q%3D%3D 1) Source Repository Se . 
Path: entifier: 
134 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:28 08:47:28 = 


a 


0 


Bilaga 1. Calls mm, 2023-11-01 14:47  diarienr: 5000-K189802-21 
2021-02-13 
14:35:44(UTC+ 
1) 


pos 
alii - Outlook 


| NUPS:770UTIOOK.IIVE.COM/Mall/U/INDOX 


Artiract Family: 


Source Repository 
Path: 


identifier: 


Web History 


E-post - mahad alii - 
Outlook 


Evidence 


2023-10-20 
08:47:29 


2023-10-20 
08:47:29 


E-post - mahad 
alii - Outlook 


https://outlook.live.com/mail/0/inbox/id/AQQkADA 
wATYwMAItZjlyADktMGUyNCOWMAIt{MDAKABA 
ASNWMNvXEMEyZp9zOPic70Q%3D%3D 


Web History 


2021-02-13 
EDI 


E-post - mahad alii - 
Outlook 


Evidence 


Artifact Family: 
Source Repository 


Path: 


2023-10-20 
08:47:29 


Source: Safari 
Account: 
Service 
Identifier: 


2023-10-20 
08:47:29 


E-post -mahad  |https://outlook.live.com/mail/0/compose/AQMKkKAD | 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook AwATYwMAItZ¡lyADktMGUyNCOwMAIMDAKAE | 14:35:54(UTC+ Account: 
YAAAOOKSSikJGGRJgf5v73jwSYBwAM2nzdDOH | 1) S R it Service 
ET4F pPFPhZi3BAAACAQ8AAAAM2nzdDOHET4 ource Repository | identifier: 
FpPFPhZi3BAAQi4vpzAAAA Path: 
137 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:30 08:47:30 = 
E-post -mahad —|https://outlook.live.com/mail/O/inbox/id/AQQKADA | 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook wATYwMAItZjlyADktMGUyNCOWMAItMDAKABA | 14:35:59(UTC+ Account: 
ASNWMNvXEMEyZp9zOPic70Q%3D%3D 1) E Service 
ES Repository, Identifier: 
138 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:32 08:47:32 a 
E-post - mahad |https://outlook.live.com/mail/0/inbox 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook 14:36:02(UTC+ Account: 
1) ; Service 
Era Repository Identifier: 
139 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:33 08:47:33 = 


E-post - mahad |https://outlook.live.com/mail/O/inbox/id/AQQKADA | 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook wATYwMAItZjlyADktMGUyNCOWMAItMDAKABA | 14:39:04(UTC+ Account: 
Å AO å 
ASNWMNvXEMEyZp9zOPic70Q%3D%3D 1) Source Repository senice E 
140 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:33 08:47:33 = 
E-post - mahad |hitps://outlook.live.com/mail/0/compose/AQMKAD | 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook AwATYwMAItZjlyADktMGUyNCOWMAItMDAKAE | 14:39:10(UTC+ Account: 
YAAAOOkSSikJG6RJgf5v73jwSYBwAM2nzdDOH | 1) s Ri it Service 
ET4FpPFPhZi3BAAACA@8AAAAM2nzdDOHET4 Pathe epository | identifier: 
FpPFPhZi3BAAQi4vp0AAAA ath: 
141 [Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:34 08:47:34 = 
E-post - mahad |https://outlook.live.com/mail/O/inbox/id/AQQKADA | 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook wATYwMAItZjlyADktMGUyNCOWMAItMDAKABA | 14:39:28(UTC+ Account: 
ASNWMNvXEMEyZp9zOPic70Q%3D%3D 1) Source Repository | Service 
Path: P Y | Identifier: 
142 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:35 08:47:35 = 
E-post - mahad |https://outlook.live.com/mail/0/inbox 2021-02-13 d Artifact Family: Source: Safari 
alii - Outlook 14:39:32(UTC+ Account: 
1) ; Service 
Source Repository Identifier: 
143 |Web History Dropbox - Evidence 2023-10-20 2023-10-20 
Förundersökningsprotok 08:51:33 08:51:33 = 
oll — Förenkla ditt liv 


Dropbox - 


sprotokoll — 
Forenkla ditt liv 


https://www.dropbox.com/sh/dejwsl48x6dg1az/AA | 2021-02-13 
Förundersökning | DhLYrUBhuxBTDxALIy PnZa?dl-0 


144 |Web History 


AG :05(UTC+ 


2019 Mercedes-Benz A 
200, Svart / 163hk pä 
Biluppgifter.se 


Evidence 


Artifact Family: 


Source Repository 
Path: 


2023-10-20 
08:57:58 


Source: Safari 


Identifier: 


2023-10-20 
08:57:58 e 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 219 
2019 [Nttps://Dlluppgiter.Se/Tordon/JIRGZ4U 2021-02-14 Artiract Family: S 
Benz A 200, 03:29:21(UTC+ 
Svart / 163hk pa 1) 


Biluppgifter.se paliko Repository identifier: 


Web History 2020 Volvo XC40 D4 Evidence 2023-10-20 2023-10-20 
AWD, Mörkbrun / 190hk 09:07:33 09:07:33 
pa Biluppgifter.se 


2020 Volvo https://biluppgifter.se/fordon/JSN49S 2021-02-15 1 Artifact Family: Source: Safari 
Së au 14:58:39(UTC+ Account: 
örkbrun 1 ; Service 
190hk pà Source Repository | Identifier: 
Biluppgifter.se Path: 
146 |Web History 2018 Nissan Qashqai 1.2 | Evidence 2023-10-20 2023-10-20 
DIG-T, Röd / 116hk pa 13:32:47 13:32:47 
Biluppgifter. se 
2018 Nissan https://biluppgifter.se/fordon/NHC077 2021-02-15 Artifact Family: Source: Safari 
cael te er :59:09(UTC+ Account: 
-T, RO ; ervice 
116hk pà ) Source Repository Identifier: 
Biluppgifter.se Path: 
147 |Web History 2020 Volkswagen Evidence 2023-10-20 2023-10-20 
Passat, Svart / 190hk pa 13:33:21 13:33:21 
Biluppgifter. se 
2020 https://biluppgifter.se/fordon/CTM45U 2021-02-15 Artifact Family: Source: Safari 
le ee 18:51:04(UTC+ Account: 
assat, Sva 1 ; Service 
190hk pà ) Source Repository | identifier: 
Biluppgifter.se ath: 
148 |Web History 2021 Mercedes-Benz Evidence 2023-10-20 2023-10-20 
GLE 350 DE, Mörkblå / 13:34:16 13:34:16 
194hk på Biluppgifter. se 


2021 Mercedes- |https://biluppgifter.se/fordon/MXP72X 2021-02-15 Artifact Family: Source: Safari 
pensi er 19:03:39(UTC+ Account: 

, Morkbla 1 ; Service 
194hk pà Source Repository Identifier: 
Biluppgifter.se am 


149 |Web History 


Quality Hotel Friends i Evidence 2023-10-20 2023-10-20 
Solna — uppdaterade 13:42:44 13:42:44 
priser för 2021 
Quality Hotel https://www.booking.com/hotel/se/quality- 2021-02-16 Artifact Family: Source: Safari 
Friends i Solna — |friends.sv.html?label-gen173nr- 13:58:39(UTC+ Account: 
uppdaterade 1FCAEoggl46AdIM1gEaMgBiAECMAEIUAEHYAE | 1) S R it Service 
priser för 2021 |N2AEB6AEB-AELIAIBGAIDuAK3gq- ource Repository | Identifier: 
BBsACAdICJDFiNDFjYzg1LWM5MWYtNGMzZS Path: 


05MmM0OLWFkZmIZZDNmMzMyMNgCBuACAQ8 
sid-cb602dccc0a7647ccb33ac1440501f9a&all sr 
blocks-54686601 230913440 0 1 0%2C5468 
6601 230913440 0 1 O&checkin=2021-02- 
18&checkout-2021-02-21&dest id-- 
2522526&dest type-city&group adults=4&group 
children=0&hapos=1&highlighted_blocks=54686 
601 230913440 0 1 0%2C54686601 2309134 
40 0 1 O&hpos-1&no rooms=2&req adults-4&r 
eq_children=0&room1=A%2CA&room2=A%2CA& 
sr_order=popularity&srepoch=1613480313&srpvi 
d=e8ae5b3ce2dd006e&ucfs=1&matching block i 
EE . 230913440 0 1 O&srhpz1&ref is. 
WIZ 


150 |Web History Booking.com: Sista Evidence 2023-10-20 2023-10-20 
steget 13:45:01 13:45:01 o 


Booking.com: https://secure.booking.com/book.html 2021-02-16 Artifact Family: Source: Safari 
Sista steget 14:01:02(UTC+ : 
1) 


Source Repository 


Path: Identifier: 


Web History Taxi | Boka taxi online - | Evidence 2023-10-20 2023-10-20 
Alltid fast pris | 13:46:13 13:46:13 
Taxijakt.se 


Taxi | Boka taxi |https://taxijakt.se/ 2021-02-16 1 Artifact Family: Source: Safari 
one FT. Atd fast 15:09:39(UTC+ Account: 
pris | Taxijakt.se 1) ; Service 
Source Repository Identifier: 
152 |Web History Branco - JIGGY (feat. Evidence 2023-10-20 2023-10-20 
N (Original) - Sök pa 13:50:22 13:50:22 
Google 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


Branco - 
JIGGY (feat. 

Yasin) (Original) 
- Sók pa Google 


[ps 77WWW.googlie.sersearcn?q- Branco*- 
+JIGGY (feat.+Yasin)+(Original)&ie=UTF- 


8&0e=UTF-8&hl=sv-se&client=safari 


2021-02-16 
ig :42:35(UTC+ 


Artiract Family: 


Source Repository 
Path: 


SET 
ccount: 
Sch H 


Identifier: 


Web History 


Branco - JIGGY (feat. 


Yasin) (Original) - Sók pa 
Google 


Evidence 


2023-10-20 


13:50:23 


2023-10-20 
13:50:23 


Branco - https://www.google.se/search?q=Branco+- 2021-02-16 1 Artifact Family: Source: Safari 
JIGGY (feat. +JIGGY (feat.+Yasin)+(Original)&ie=UTF- 16:42:36(UTC+ Account: 
Yasin) (Original) |B&oe-UTF-8&hl-sv-se&client-safari 1) S R it Service 
- Sök pa Google ource Repository | identifier: 
Path: 
154 |Web History Branco Ft Yasin - JIGGY |Evidence 2023-10-20 2023-10-20 
(Official Lyrics) - 13:50:30 13:50:30 
YouTube 
Branco Ft Yasin |https://m.youtube.com/watch?v=BFPfiVfiG44 2021-02-16 Artifact Family: Source: Safari 
a ene (Official 16:42:39(UTC+ Account: 
yrics) - 1 ; Service 
YouTube Source Repository Identifier: 
Path: 
Web History YouTube Evidence 2023-10-20 2023-10-20 
13:50:32 13:50:32 


YouTube https://m.youtube.com/watch?v=BFPfiVfiG44 2021-02-16 Artifact Family: Source: Safari 
e :42:39(UTC+ Account 
; ervice 
oe Repository Identifier: 
156 |Web History Branco Ft Yasin - JIGGY |Evidence 2023-10-20 2023-10-20 
(Official Lyrics) - 13:50:34 13:50:34 
YouTube 


Branco Ft Yasin |https://m.youtube.com/watch?v-BFPfiVfiG44 2021-02-16 Artifact Family: Source: 
EN (Official 16:42:45(UTC+ KnowledgeC 

tics) - : ` 
YouTube p Source Repository Account 

Path: Identifier: 
157 |Web History Branco Ft Yasin - JIGGY |Evidence 2023-10-20 2023-10-20 
(ome icial Lyrics) - 13:51:08 13:51:08 
YouTube 


Branco Ft Yasin |https://m.youtube.com/watch?v-BFPfiVfiG44 2021-02-16 Artifact Family: Source: 
ve (Official 18:01:20(UTC+ KnowledgeC 
rics) - : d 
YouTube 2 Source Repository Recount 
Path: Identifier: 
158 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg — en skadad 13:53:32 13:53:32 
| Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: Safari 
ES en len. skadad-efter-misstankt-skottlossning 20:24:28(UTC+ Account: 
skada 1 ; Service 
Aftonbladet ) Source Repository | identifier: 
Path: 
Web History flashback - Sök pa Evidence 2023-10-20 2023-10-20 
Google 13:55:06 13:55:06 
flashback - Sök | https://www.google.se/search?q=flashback8ie=U | 2021-02-16 Artifact Family: Source: Safari 
pà Google TF-8&oe-UTF-8&hl-sv-se&client-safari 20:30:23(UTC+ Account: 
1) ; Service 
Source Repository Identifier: 
Web History flashback - Sök på Evidence 2023-10-20 2023-10-20 
Google 13:55:29 13:55:29 
flashback - Sök |https://www.google.se/search?q=flashback&ie=U | 2021-02-16 Artifact Family: Source: Safari 
på Google TF-8&0e=UTF-8&hl=sv-se&client=safari 20:30:24(UTC+ Account: 
1) ; Service 
Source Repository Identifier: 
Web History Flashback Forum | Evidence 2023-10-20 2023-10-20 
Yttrandefrihet på riktigt! 13:55:30 13:55:30 
Flashback https://www. flashback.org/ 2021-02-16 Artifact Family: Source: Safari 
Tomm | E 20:30:26(UTC+ Account: 
randefrihet pa 1 ; Service 
riktigt! Source Repository | Identifier: 
Path: 
162 |Web History Flashback Forum - Evidence 2023-10-20 2023-10-20 
Aktuella ämnen 13:55:31 13:55:31 à 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


Flashback 
Forum - Aktuella 


amnen 


https://www.flashback.org/aktuella-amnen 


2021-02-16 
all 


Artifact Family: 


Source Repository 
Path: 


Source-Safari— 
Account: 

Service 

Identifier: 


Web History 


Flashback Forum - 


Aktuella åmnen 


2023-10-20 
13:55:32 


2023-10-20 
13:55:32 


Flashback 


https://www.flashback.org/aktuella-amnen 


Forum - Aktuella 


åmnen 


2021-02-16 
no. 


Artifact Family: 


Source Repository 
Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Web History 


ämnen 


Flashback Forum - Nya 


Evidence 


2023-10-20 
13:55:32 


2023-10-20 
13:55:32 


Flashback https://www.flashback.org/nya-amnen 2021-02-16 1 Artifact Family: Source: Safari 
Forum - Nya 20:30:44(UTC+ Account: 
ämnen 1) ; Service 
Source Repository Identifier: 
165 |Web History Flashback Forum - Nya | Evidence 2023-10-20 2023-10-20 
ämnen 13:55:33 13:55:33 Š 


Flashback https://www.flashback.org/nya-amnen 2021-02-16 Artifact Family: Source: 
Forum - Nya 20:30:45(UTC+ KnowledgeC 
einen 1) Source Repository Account 
Fathi Identifier: 
166 |Web History Flashback Forum - Evidence 2023-10-20 2023-10-20 
Aktuella ämnen 13:55:34 13:55:34 e 


Flashback https://www.flashback.org/aktuella-amnen 2021-02-16 1 Artifact Family: Source: Safari 
Forum - Aktuella 20:30:50(UTC+ Account: 
ämnen 1) ; Service 
Source Repository Identifier: 
167 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg — en skadad 13:58:40 13:58:40 å 
| Aftonbladet 


Skottlossning i 
Sundbyberg - en | /man-skadad-efter-misstankt-skottlossning 
skadad | 

Aftonbladet 


https://www.aftonbladet.se/senastenytt/a/7KmLkB 


2021-02-16 
21:01:59(UTC+ 
1) 


Artifact Family: 


Source Repository 
Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Web History 


Skottlossning i 
Aftonbladet 


Sundbyberg — en skadad 


2023-10-20 
13:58:44 


2023-10-20 
13:58:44 


Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: Safari 
Se NES — en |/man-skadad-efter-misstankt-skottlossning 21:02:00(UTC+ Account: 
skada 1 ; Service 
Aftonbladet | Source Repository | identifier: 
Path: 
169 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 


| Aftonbladet 


Sundbyberg — en skadad 


13:58:45 


13:58:45 


Skottlossning i 


https://www.aftonbladet.se/senastenytt/a/7KmLkB 
/man-skadad-efter-misstankt-skottlossning 


2021-02-16 
a :02:05(UTC+ 


Artifact Family: 


Source Repository 
Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Flashback Forum | 


Yttrandefrihet 


a riktigt! 


Evidence 


2023-10-20 
13:58:59 


2023-10-20 
13:58:59 


Flashback https://www.flashback.org/ 2021-02-16 1 Artifact Family: Source: Safari 
Fomm | ES 21:04:44(UTC+ Account: 
Yttrandefrihet på 1) ; Service 
riktigt! Source Repository | identifier: 
Path: 
171 [Web History Flashback Forum - Evidence 2023-10-20 2023-10-20 
Aktuella ämnen 13:59:00 13:59:00 = 


Flashback 
Forum - Aktuella 


ämnen 


https://www.flashback.org/aktuella-amnen 


2021-02-16 
21:04:49(UTC+ 
1) 


Artifact Family: 


Source Repository 
Path: 


Source: Safari 
Account: 
Service 
Identifier: 


[Web History Flashback Forum = [Evidence 


Aktuella ämnen 


me 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 222 
17: 


ZUZ3-TU-ZU ^ |gUZS-TU-2U— —] 
3850 PSG | 


Flashback https://www.flashback.org/aktuella-amnen 2021-02-16 Artifact Family: Source: 
Forum - Aktuella 21:04:50(UTC+ KnowledgeC 
zungen 1) Source Repository Recount 
Path: Identifier: 
173 |Web History Flashback Forum - Nya |Evidence 2023-10-20 2023-10-20 
ämnen 13:59:01 13:59:01 = 


Flashback https://www.flashback.org/nya-amnen 2021-02-16 d Artifact Family: Source: Safari 
Forum - Nya 21:05:34(UTC+ Account: 
ämnen 1) ; Service 
Source Repository Identifier: 
174 |Web History Flashback Forum - Nya | Evidence 2023-10-20 2023-10-20 
inlägg 14:05:43 14:05:43 = 


Flashback https://www.flashback.org/nya-inlagg 2021-02-16 1 Artifact Family: Source: Safari 
Foum - Nya 21:05:39(UTC+ Account: 
inlagg 1) ; Service 
Source Repository Identifier: 
175 |Web History Taggsök Evidence 2023-10-20 2023-10-20 
14:05:44 14:05:44 = 


Taggsök https://www.flashback.org/search tags.php 2021-02-16 1 Artifact Family: Source: Safari 
21:05:37(UTC+ Account: 
1) ; Service 
Source Repository Identifier: 
176 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:05:45 14:05:45 c 
- Flashback Forum 


https://www.flashback.org/t3305870 2021-02-16 1 Artifact Family: Source: Safari 
1 ) :05:44(UTC+ Recount 
Source Repository identifi : 
» entifier: 
Flashback Path: | 
Forum 


177 |Web History 


Skottlossning Tulegatan 
Sundbyberg 16 feb 2021 
- Sidan 2 - Flashback 

Forum 


Evidence 


2023-10-20 
14:05:46 


2023-10-20 
14:05:46 


Skottlossning https://www.flashback.org/t3305870p2 2021-02-16 1 Artifact Family: Source: Safari 
Ten He A :05:50(UTC+ Account 
undbyberg ; ervice 

feb 2021 - Sidan Source Repository | Identifier: 

2 - Flashback Path: 

Forum 

178 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 

Sundbyberg 16 feb 2021 14:05:48 14:05:48 * 
- Flashback Forum 


Skottlossning https://www.flashback.org/t3305870 2021-02-16 d Artifact Family: Source: Safari 
Tulegatan NG 21:05:51(UTC+ Account: 
undbyberg 1 ; Service 

feb 2021 - ) Source Repository |, dentifier: 

Flashback Path: 

Forum 

179 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 

Sundbyberg 16 feb 2021 14:05:48 14:05:48 a 
- Flashback Forum 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - 
Flashback 
Forum 


https://www.flashback.org/t3305870 


2021-02-16 
a :05:55(UTC+ 


Artifact Family: 


Source Repository 
Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


180 |Web History 


Skottlossning Tulegatan 
Sundbyberg 16 feb 2021 
- Sidan 2 - Flashback 
Forum 


Evidence 


2023-10-20 
14:05:49 


2023-10-20 
14:05:49 


Skottlossning https://www.flashback.org/t3305870p2 


2021-02-16 
21:07:47(UTC+ 
1) 


Artifact Family: 


Source Repository 
Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
81 |Web History 


- Sidan 2 - Flashback 
Forum 


'SKottlossnIng Tulegatan | 
Sundbyberg 16 feb 2021 


Evidence 


14:05:50 


oru 


Skottlossning https://www.flashback.org/t3305870p2 2021-02-16 Artifact Family: Source: 
TAS NG 21:07:50(UTC+ KnowledgeC 

undbyberg 1 i Account: 
feb 2021 - Sidan ) Source Repository | Service 
2 - Flashback am identifier: 
Forum 

182 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:05:50 14:05:50 


- Sidan 2 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p2 2021-02-16 Artifact Family: Source: 
u nG 21:10:55(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository | Service 
2 - Flashback am. Identifier: 
Forum 
Web History Flashback Forum | Evidence 2023-10-20 2023-10-20 
Yttrandefrihet pa riktigt! 14:07:44 14:07:44 
Flashback https://www.flashback.org/ 2021-02-16 Artifact Family: Source: Safari 
rorum nr 21:18:48(UTC+ Account: 
randefrihet pa 1 ; Service 
riktigt! Source Repository | identifier: 
Path: 
Web History Flashback Forum - Nya | Evidence 2023-10-20 2023-10-20 
inlägg 14:07:45 14:07:45 


Flashback https://www.flashback.org/nya-inlagg 2021-02-16 Artifact Family: Source: Safari 
Forumi Nya 21:18:52(UTC+ Account: 
inlägg 1) ; Service 
Borce Repository Identifier: 
185 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:07:46 14:07:46 
- Flashback Forum 


Skottlossning https://www.flashback.org/t3305870 2021-02-16 Artifact Family: Source: Safari 
Me 16 21:18:55(UTC+ Account: 
unabyberg 1 ; Service 

feb 2021 - ) Source Repository Identifier: 

Flashback Path: 

Forum 

186 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 

Sundbyberg 16 feb 2021 14:07:46 14:07:46 a 
- Sidan 3 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p3 2021-02-16 Artifact Family: Source: Safari 
Uh NG 21:18:58(UTC+ Account: 
undbyberg 1 ; Service 

feb 2021 - Sidan Source Repository | Identifier: 

3 - Flashback Rate 

Forum 

187 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 

Sundbyberg 16 feb 2021 14:07:47 14:07:47 a 
- Sidan 3 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p3 2021-02-16 Artifact Family: Source: 
Tulegatan T 21:19:00(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan | Source Repository | Service 
3 - Flashback Set Identifier: 
Forum 
Web History Du lämnar nu Flashback | Evidence 2023-10-20 2023-10-20 
Forum 14:07:50 14:07:50 


Du lamnar nu https://www.flashback.org/leave.php?u=https%3A | 2021-02-16 Artifact Family: Source: Safari 
Flashback %2F%2Fwww.aftonbladet.se%2Fsenastenytt%2F | 21:19:51(UTC+ Account: 
Forum a%2F7KmLkB%2Fman-skadad-efter-misstankt- |1) R S Service 
skottlossning Source Repository | identifier: 
Path: 
189 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg — en skadad 14:07:52 14:07:52 
| Aftonbladet 


a 


6 


Bilaga t. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
2021-02-16 
25 :31:09(UTC+ 


Sundbyberg = En /man-skadad-efter-misstankt-skottlossning 


Artiract Family: 


skadad | S R it 
Aftonbladet ource Repository | Identifier: 
Path: 
Web History Skottlossning i 2023-10-20 2023-10-20 
Sundbyberg - en skadad 14:07:58 14:07:58 
| Aftonbladet 
Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: 
Sundbyberg — en |/man-skadad-efter-misstankt-skottlossning 21:31:15(UTC+ KnowledgeC 
skada . à 
Aftonbladet i Source Repository ey 
am: Identifier: 
191 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:08:42 14:08:42 a 
- Sidan 3 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p3 2021-02-16 Artifact Family: Source: 
IU 16 21:34:05(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository | Service 
3 - Flashback Path: Identifier: 
Forum 
192 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
eral I 16 feb 2021 14:08:43 14:08:43 e 
- Sidan 4 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: Source: Safari 
d NG 21:34:44(UTC+ Account: 
unabyberg 1 ` Service 
feb 2021 - Sidan ) Source Repository | Identifier: 
4 - Flashback Path: 
Forum 
193 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:08:44 14:08:44 4 
- Sidan 4 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: Source: 


a :34:50(UTC+ neuen 
; ccount: 
Source Repository SENES 


Identifier: 


2023-10-20 
14:08:45 


2023-10-20 
14:08:45 


194 |Web History Skottlossning Tulegatan |Evidence 
Sundbyberg 16 feb 2021 
- Sidan 4 - Flashback 


Forum 


Skottlossning https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: Source: 
ruegan NG 21:41:45(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Bouree Repository | Service 
4 - Flashback au: Identifier: 
Forum 
Web History Du lämnar nu Flashback |Evidence 2023-10-20 2023-10-20 
Forum 14:09:48 14:09:48 
Du lämnar nu https://www.flashback.org/leave.php?u=https%3A | 2021-02-16 Artifact Family: Source: Safari 
Flashback %3F%2F goo. gl%2Fmaps%2FUVSXVGgxsjkbXN | 21:42:03(UTC+ Account: 
Forum KA9 1) ; Service 
Source Repository | identifier: 
Web History Evidence 2023-10-20 2023-10-20 
14:11:39 14:11:39 
https://goo.gl/maps/UVsXVGqxsjkbXNKA9 2021-02-16 Artifact Family: Source: Safari 
21:42:05(UTC+ Account: 
1) ; Service 
Source Repository Identifier: 
Web History Evidence 2023-10-20 2023-10-20 
14:11:55 14:11:55 
https://www.google.se/maps/@59.3649269,17.97 | 2021-02-16 Artifact Family: Source: Safari 
443,3a,75y,356.4h,96.44t/data=!3m6!1e1!3m4!1s | 21:42:05(UTC+ Account: 
D2qsM9e_FlwhOhTS8JvOFA!2e0!7i16384!8i8 192 1 5 Service 
?shorturl=1 ) Source Repository Identifier: 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
98 web History 


- Sidan 4 - Flashback 
Forum 


SKomossning Tulegatan | 
Sundbyberg 16 feb 2021 


Evidence 


14:13:05 


Skottlossning https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: Source: 
Ul eae NG 22:02:15(UTC+ KnowledgeC 

undbyberg 1 i Account: 
feb 2021 - Sidan ) Source Repository | Service 
4 - Flashback am identifier: 
Forum 

199 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:13:06 14:13:06 S 


- Sidan 4 - Flashback 
Forum 


Skottlossning |https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: Source: 
Tegan 16 22:03:00(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository | (service 
4 - Flashback gut: Identifier: 
Forum 
200 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Ser 16 feb 2021 14:13:07 14:13:07 + 
- Sidan 4 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: Source: 
en NG 22:03:25(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository | Service 
4 - Flashback ath: Identifier: 
Forum 
201 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:13:07 14:13:07 a 
- Sidan 4 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: Source: 
Tulegatan vs 22:08:10(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository || Service 
4 - Flashback AU: Identifier: 
Forum 
202 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:13:08 14:13:08 a 


- Sidan 4 - Flashback 
Forum 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - Sidan 
4 - Flashback 
Forum 


https://www.flashback.org/t3305870p4 


2021-02-16 
mer 


Artifact Family: 


Source Repository 
Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Web History 


Skottlossning i 
Sundbyberg — en skadad 
| Aftonbladet 


14:13:40 


2023-10-20 


2023-10-20 
14:13:40 


Skottlossning i 


https://www.aftonbladet.se/senastenytt/a/7KmLkB 


2021-02-16 


Artifact Family: 


Source: Safari 


Seas = en |/man-skadad-efter-misstankt-skottlossning 22:08:38(UTC+ Account: 
skada 1 ; Service 
Aftonbladet | Source Repository | identifier: 
Path: 
204 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
tna en skadad 14:13:41 14:13:41 
| Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: Safari 
See en |/man-skadad-efter-misstankt-skottlossning 22:08:38(UTC+ Account: 
skada 1 ; Service 
Aftonbladet ) Source Repository | identifier: 
Path: 
205 [Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg — en skadad 14:13:42 14:13:42 
| Aftonbladet 


Skottlossning i https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: Safari 

ines en |/man-skadad-efter-misstankt-skottlossning 22:09:17(UTC+ Account: 

skada 1 ; Service 

Aftonbladet ) Source Repository | identifier: 

Path: 
206 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 

Sundbyberg — en skadad 14:13:43 14:13:43 e 
| Aftonbladet 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 226 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Source: 
Sundbyberg - en |/man-skadad-efter-misstankt-skottlossning 22:09:20(UTC+ KnowledgeC 
skadad | 1) ; Account: 
Aftonbladet h Service 

Identifier: 

207 |Web History Skottlossning i Evidence 
Sundbyberg — en skadad 
Aftonbladet 

Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 1 Artifact Family: Source: Safari 
an — en |/man-skadad-efter-misstankt-skottlossning 22:10:56(UTC+ Account: 
skada 1 ; Service 
Aftonbladet ) reg Repository identifier 


208 |Web History 


Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg — en skadad 14:13:44 14:13:44 S 
| Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: 
nd — en |/man-skadad-efter-misstankt-skottlossning 22:11:00(UTC+ KnowledgeC 
skada 1 ; Account: 
Aftonbladet | Source Recto Serica 

BLUE Identifier: 

209 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyperg — en skadad 14:15:34 14:15:34 = 
| Aftonbladet 

Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 1 Artifact Family: Source: Safari 

Fre — en |/man-skadad-efter-misstankt-skottlossning 22:22:19(UTC+ Account: 

skada: 1 ; Service 

Aftonbladet ) Source Repository | Identifier: 
Path: 

210 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg — en skadad 14:15:34 14:15:34 E 
| Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 1 Artifact Family: Source: Safari 

Sen - en |/man-skadad-efter-misstankt-skottlossning 22:22:19(UTC+ Account: 

skada 1 ; Service 

Aftonbladet ) Source Repository | identifier: 

Path: 
211 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 

Sundbyberg — en skadad 14:15:35 14:15:35 e 
| Aftonbladet 


= 


Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: Safari 
Sundbyberg - en |/man-skadad-efter-misstankt-skottlossning 22:22:38(UTC+ Account: 


skadad | 1 n Service 
Aftonbladet i Source Repository | identifier: 
Path: 
212 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg — en skadad 14:15:36 14:15:36 = 
| Aftonbladet 


Skottlossning i  [https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: 
eee ae — en |/man-skadad-efter-misstankt-skottlossning 22:22:40(UTC+ KnowledgeC 
skada 1 ; Account: 
Aftonbladet Source Repository | Service 


Identifier: 


Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:15:55 14:15:55 a 
- Sidan 4 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: Source: 
eech 46 22:22:50(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan | Source Repository. Sorice 
4 - Flashback au: Identifier: 
Forum 
214 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:15:56 14:15:56 = 
- Sidan 5 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p5 2021-02-16 1 Artifact Family: Source: Safari 
en 16 22:23:01(UTC+ Account: 
undbyberg 1 ; Service 
feb 2021 - Sidan Source Repository | Identifier: 
5 - Flashback Path: 
Forum 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
[wep History Skottlossning Tulegatan | 
Sundbyberg 16 feb 2021 


- Sidan 5 - Flashback 
Forum 


| Evidence 
14:15:56 


Skottlossning https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: Source: 
mun NG 22:23:05(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan ) Source Repository | Service 
5 - Flashback ath: Identifier: 
Forum 
216 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:15:57 14:15:57 S 


- Sidan 5 - Flashback 
Forum 


Skottlossning |https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: Source: 
D d 16 22:23:25(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan I 
5 - Flashback all: Identifier: 
Forum 
217 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg — en skadad 14:18:06 14:18:06 
| Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: Safari 
An en |/man-skadad-efter-misstankt-skottlossning 22:23:28(UTC+ Account: 
skada 1 ; Service 
Aftonbladet ) Source Repository | identifier: 
Path: 
218 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg — en skadad 14:18:08 14:18:08 
| Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: 
Sundbyberg - en |/man-skadad-efter-misstankt-skottlossning 22:23:30(UTC+ KnowledgeC 
skadad | 1 ; Account: 
Aftonbladet Source Repository "Service 
am: Identifier: 
219 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg — en skadad 14:18:08 14:18:08 
| Aftonbladet 


Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: Safari 
Sundbyberg — en |/man-skadad-efter-misstankt-skottlossning 22:26:10(UTC+ Account: 
1) 


skadad | s Service 
Aftonbladet Source Repository | ¡q entifier: 


Web History Skottlossning i 2023-10-20 2023-10-20 


Sundbyberg — en skadad 
Aftonbladet 


14:18:09 


14:18:09 


Skottlossning i 
Sundbyberg - en 
skadad | 
Aftonbladet 


https://www.aftonbladet.se/senastenytt/a/7KmLkB 
/man-skadad-efter-misstankt-skottlossning 


2021-02-16 
22:26:15(UTC+ 
1) 


Artifact Family: 


Source Repository 
Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Web History 


Skottlossning i 
Sundbyberg — en skadad 


2023-10-20 


14:18:10 


2023-10-20 
14:18:10 


Aftonbladet 


Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: Safari 
ee en | /man-skadad-efter-misstankt-skottlossning 22:27:43(UTC+ Account: 
skada 1 ; Service 
Aftonbladet Source Repository | identifier: 
Path: 
222 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg — en skadad 14:18:11 14:18:11 
| Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: 
ed ae — en |/man-skadad-efter-misstankt-skottlossning 22:27:45(UTC+ KnowledgeC 
skada 1 ; Account: 
Aftonbladet | Source Repository Service 
GLUE Identifier: 
223 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:19:20 14:19:20 = 


- Sidan 5 - Flashback 
Forum 


Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 228 


ps 77WWW.Tlasnpack.orgrt33U58 7'Upo 2021-02-16 Artüract Family: 
een ene Ier 
undbyberg : 
feb 2021 - Sidan ) solve Repository i 
5 - Flashback EINE Identifier: 
Forum 
224 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:19:21 14:19:21 * 
- Sidan 5 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: Source: 

ri Ae 22:33:45(UTC+ KnowledgeC 
undbyberg 1 ; Account: 

feb 2021 - Sidan Source Repository | Service 

5 - Flashback SUR Identifier: 

Forum 


225 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:19:22 14:19:22 
- Sidan 5 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: Source: 
" 22:35:35(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository | Service 
5 - Flashback ath: Identifier: 
Forum 
226 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg — en skadad 14:20:14 14:20:14 = 
| Aftonbladet 


Skottlossning i —|https://www.aftonbladet.se/senastenytt/a/7KmLKkB | 2021-02-16 d Artifact Family: Source: Safari 

See — en |/man-skadad-efter-misstankt-skottlossning 22:45:38(UTC+ Account: 

skada 1 ; Service 

Aftonbladet ) Source Repository | identifier: 

Path: 
227 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 

ee — en skadad 14:20:15 14:20:15 = 
| Aftonbladet 


= 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: Safari 
ne — en |/man-skadad-efter-misstankt-skottlossning 22:45:39(UTC+ Account: 
skada 


1 ; Service 
Aftonbladet Source Repository | Identifier: 
Path: 
228 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:20:49 14:20:49 a 
- Sidan 5 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: Source: 
Tegan 16 22:45:50(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Bodine Repository | Service 
5 - Flashback ath: Identifier: 
Forum 
229 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:20:49 14:20:49 a 
- Sidan 5 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: Source: 
22:46:20(UTC+ KnowledgeC 
ib] Source Repository a 

5 - Flashback Path: Identifier: 

Forum 


Web History Skottlossning Tulegatan 
Sundbyberg 16 feb 2021 
- Sidan 5 - Flashback 
Forum 


Evidence 2023-10-20 


14:20:51 


2023-10-20 
14:20:51 


Skottlossning https://www flashback.org/t3305870p5 2021-02-16 Artifact Family: Source: 
Le era He 22:46:45(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repositori Service 
5 - Flashback ath: Identifier: 
Forum 
231 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
cedet — en skadad 14:21:44 14:21:44 + 
| Aftonbladet 


Bilaga t. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 229 


MUPS7/WwWw.attonpradet.sersenastenytar/KMLKB | 2021-02-16 Aruract Family: 
A a /man-skadad-efter-misstankt-skottlossning 22:47:26(UTC+ 
1) 


skadad | 


Aftonbladet Source Repository | identifier: 


Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:22:16 14:22:16 
- Sidan 5 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: Source: 
U ma 22:52:00(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository | service 
5 - Flashback ath: Identifier: 
Forum 
233 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:22:17 14:22:17 > 
- Sidan 5 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: Source: 
Tuegann nG 22:53:20(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository Service 
5 - Flashback am: Identifier: 
Forum 
234 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:22:18 14:22:18 5 
- Sidan 6 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: Source: Safari 
megan 16 22:55:04(UTC+ Account: 
undbyberg 1 ; Service 
feb 2021 - Sidan | Source Repository | Identifier: 
6 - Flashback Path: 
Forum 


235 |Web History Evidence 


Skottlossning Tulegatan 
Sundbyberg 16 feb 2021 
- Sidan 6 - Flashback 


Forum 


2023-10-20 
14:22:18 


2023-10-20 
14:22:18 


Skottlossning https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: Source: 
Tulegatan 16 22:55:05(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan | Source Repository | service 
6 - Flashback path: Identifier: 
Forum 
236 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:22:19 14:22:19 a 
- Sidan 6 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: Source: 
Tulegatan NG 22:55:15(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan ) Source Repository | Service 
6 - Flashback an: Identifier: 
Forum 
237 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:22:19 14:22:19 a 
- Sidan 6 - Flashback 
Forum 
Skottlossning https://www. flashback.org/t3305870p6 2021-02-16 Artifact Family: Source: 
Tulegatan NG 22:56:05(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan | Source Repository | Service 
6 - Flashback Path: Identifier: 
Forum 
238 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyperg 16 feb 2021 14:22:20 14:22:20 - 
- Sidan 6 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: Source: 
ied k 22:56:30 (UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan | Source Repository [Service 
6 - Flashback am: Identifier: 
Forum 
239 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg — en skadad 14:23:20 14:23:20 
| Aftonbladet 


Bilaga t. Calls mm, 2023-11-01 14:47  diarienr: 5000-K189802-21 230 


MUps//WWW.attonbladet.se/senastenyia/7TKMLKB | 2021-02-16 Arüract Family: 
Sundbyberg = En /man-skadad-efter-skottlossning-i-sundbyberg 22:57:28(UTC+ 
skadad | 1) S R it 
Aftonbladet ource Repository | Identifier: 
Path: 
Web History Skottlossning i 2023-10-20 2023-10-20 
Sundbyberg — en skadad 14:23:21 14:23:21 
| Aftonbladet 
Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: Safari 
nn en |/man-skadad-efter-skottlossning-i-sundbyberg 22:57:28(UTC+ Account: 
skada 1 ; Service 
Aftonbladet Source Repository | Identifier: 
Path: 
241 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
ng. en skadad 14:23:22 14:23:22 
| Aftonbladet 
Skottlossning i ` | https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: Safari 
Hui naL en |/man-skadad-efter-skottlossning-i-sundbyberg 22:58:20(UTC+ Account: 
skada 1 ; Service 
Aftonbladet ) Source Repository | identifier: 
Path: 
242 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg — en skadad 14:23:22 14:23:22 
| Aftonbladet 
Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: Safari 
ERU RE en |/man-skadad-efter-skottlossning-i-sundbyberg 22:58:33(UTC+ Account: 
skada 1 ; Service 
Aftonbladet ) Source Repository | identifier: 
Path: 
243 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg — en skadad 14:23:23 14:23:23 
| Aftonbladet 


Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: 

Sundbyberg - en |/man-skadad-efter-skottlossning-i-sundbyberg 22:58:35(UTC+ KnowledgeC 

Kae N Source Repository Account 
Path: Identifier: 


2023-10-20 
14:23:59 


244 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 
Sundbyberg 16 feb 2021 14:23:59 
- Sidan 6 - Flashback 


Forum 


Skottlossning https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: Source: 


On EE 
" count: 

feb 2021 - Sidan ) Source Repository Servios 

6 - Flashback GLUE Identifier: 


Forum 


Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:23:59 14:23:59 a 
- Sidan 6 - Flashback 


Forum 


Skottlossning https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: Source: 
en 16 23:01:30(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository | Service 
6 - Flashback an: Identifier: 
Forum 
246 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg - en skadad 14:24:06 14:24:06 
| Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: 
Sache — en |/man-skadad-efter-skottlossning-i-sundbyberg 23:01:35(UTC+ KnowledgeC 
skada 1 ; Account: 
Aftonbladet ) Source Repository | Service 
an: Identifier: 
247 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg — en skadad 14:24:06 14:24:06 
| Aftonbladet 
Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: Safari 
ale en |/man-skadad-efter-skottlossning-i-sundbyberg 23:02:55(UTC+ Account: 
skada 1 ; Service 
Aftonbladet | Source Repository | identifier: 
Path: 
248 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
let — en skadad 14:24:07 14:24:07 + 
| Aftonbladet 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


231 


Skottlossning i 


https://www.aftonbladet.se/senastenytt/a/7KmLkB 


Sundbyberg — en |/man-skadad-efter-skottlossning-i-sundbyberg 


skadad | 
Aftonbladet 


249 |Web History 


2021-02-16 
ne 


Skottlossning Tulegatan 
Sundbyberg 16 feb 2021 
- Sidan 6 - Flashback 
Forum 


Evidence 


Artifact Family: 


Source Repository 
Path: 


2023-10-20 


14:24:07 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


2023-10-20 
14:24:07 


- Sidan 6 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: Source: 
iud 16 23:03:45(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository [service 
6 - Flashback ath Identifier: 
Forum 
250 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:24:08 14:24:08 = 


Skottlossning https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: Source: 
Rn Ae 23:03:55(UTC+ KnowledgeC 
undbyberg 1 ; Account: 

feb 2021 - Sidan Source Repository. Service 

6 - Flashback au: Identifier: 

Forum 

251 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 

Sundbyberg 16 feb 2021 14:24:08 14:24:08 + 
- Sidan 6 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: Source: 
ee T 23:27:15(UTC+ KnowledgeC 
undbyberg 1 i Account: 
feb 2021 - Sidan | Source Repository | Service 
6 - Flashback Path: Identifier: 
Forum 
252 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg — en skadad 14:24:08 14:24:08 a 
| Aftonbladet 


Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 1 Artifact Family: Source: Safari 
Sundbyberg - en |/man-skadad-efter-skottlossning-i-sundbyberg 23:28:13(UTC+ Account: 
skadad | 1 ; Service 
Aftonbladet ) Source Repository | ¡q entifier: 
Path: 
253 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg — en skadad 14:24:09 14:24:09 
| Aftonbladet 


Skottlossning i 
Sundbyberg — en 
skadad | 
Aftonbladet 


https://www.aftonbladet.se/senastenytt/a/7KmLkB 
/man-skadad-efter-skottlossning-i-sundbyberg 


2021-02-16 
AA 


Artifact Family: 


Source Repository 
Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


254 


Web History 


Skottlossning i 
Sundbyberg - en skadad 
| Aftonbladet 


Evidence 


14:24:09 


2023-10-20 


2023-10-20 
14:24:09 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: Safari 
An en |/man-skadad-efter-skottlossning-i-sundbyberg 23:36:47(UTC+ Account: 
skada 1 ; Service 
Aftonbladet ) Source Repository |, identifier: 
Path: 
255 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg — en skadad 14:24:09 14:24:09 
| Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: 
See — en |/man-skadad-efter-skottlossning-i-sundbyberg 23:36:50(UTC+ KnowledgeC 
skada 1 ; Account: 
Aftonbladet Source Repository | Service 
an. Identifier: 
256 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg — en skadad 14:24:10 14:24:10 
| Aftonbladet 


Skottlossning i 
Sundbyberg — en 
skadad | 
Aftonbladet 


https://www.aftonbladet.se/senastenytt/a/7KmLkB 
/man-skadad-efter-skottlossning-i-sundbyberg 


2021-02-16 
23:41:04(UTC+ 
1) 


Artifact Family: 


Source Repository 
Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


257 


Web History 


Skottlossning i 
Sundbyberg — en skadad 
Aftonbladet 


Evidence 


2023-10-20 
14:24:18 


Skottlossning i 


https://www.aftonbladet.se/senastenytt/a/7KmLkB 


Sundbyberg - en | /man-skadad-efter-skottlossning-i-sundbyberg 


skadad | 
Aftonbladet 


258 |Web History 


2021-02-16 
a 


Skottlossning i 
Sundbyberg - en skadad 
| Aftonbladet 


Artifact Family: 


Source Repository 
Path: 


2023-10-20 
14:24:19 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


2023-10-20 
14:24:19 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 1 Artifact Family: Source: Safari 

al — en |/man-skadad-efter-skottlossning-i-sundbyberg 23:54:31(UTC+ Account: 

skada 1 ; Service 

Aftonbladet i Source Repository | Identifier: 

Path: 
259 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 

Sundbyberg — en skadad 14:24:19 14:24:19 a 
| Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 1 Artifact Family: Source: Safari 

oaks — en |/man-skadad-efter-skottlossning-i-sundbyberg 23:54:31(UTC+ Account: 

skada 1 ; Service 

Aftonbladet ) Source Repository | Identifier: 

Path: 
260 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 

Sundbyberg — en skadad 14:24:19 14:24:19 a 
| Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-17 1 Artifact Family: Source: Safari 

u — en |/man-skadad-efter-skottlossning-i-sundbyberg 00:04:06(UTC+ Account: 

skada 1 ; Service 

Aftonbladet ) Source Repository | identifier: 

Path: 
261 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 

Sundbyberg — en skadad 14:24:20 14:24:20 “ 
| Aftonbladet 


Skottlossning i 
Sundbyberg — en 
skadad | 
Aftonbladet 


https://www.aftonbladet.se/senastenytt/a/7KmLkB 
/man-skadad-efter-skottlossning-i-sundbyberg 


2021-02-17 
00:04:10(UTC+ 
1) 


Artifact Family: 


Source Repository 
Path: 


Source: 
KnowledgeC 
Account: 
Service 

Identifier: 


Web History 


Skottlossning Tulegatan 
Sundbyberg 16 feb 2021 
- Sidan 6 - Flashback 

Forum 


Evidence 


2023-10-20 
14:24:21 


2023-10-20 
14:24:21 


Skottlossning https://www.flashback.org/t3305870p6 2021-02-17 Artifact Family: Source: 
NG 00:04:30(UTC+ KnowledgeC 

undbyberg 1 ; Account: 
feb 2021 - Sidan Bouree Repository | Service 
6 - Flashback an: Identifier: 
Forum 

263 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:24:23 14:24:23 * 


- Sidan 7 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p7 2021-02-17 1 Artifact Family: Source: Safari 
Tulegatan 46 Me GUI Account 
undbyberg ; ervice 
feb 2021 - Sidan ) Source Repository Identifier: 
7 - Flashback al: 
Forum 
264 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:24:24 14:24:24 a 


- Sidan 7 - Flashback 
Forum 


Skottlossning  [https://www.flashback.org/t3305870p7 2021-02-17 Artifact Family: Source: 
TUA 16 00:05:00(UTC+ KnowledgeC 
undbyberg 1 ; Account: 

feb 2021 - Sidan Source Repository | service 

7 - Flashback an: Identifier: 

Forum 

265 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 

Sundbyberg 16 feb 2021 14:24:26 14:24:26 2 
- Sidan 7 - Flashback 
Forum 


Sundbyberg 16 
feb 2021 - Sidan 


9802-21 


233 


Calls mm, 2023-11-01 14:47 diarienr: 5000-K18! 


2021-02-17 
AU 


Artiract Family: 


Source Repository 
Path: 


7 - Flashback Identifier: 
Forum 
266 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:24:30 14:24:30 * 


- Sidan 7 - Flashback 
Forum 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - Sidan 
7 - Flashback 
Forum 


https://www.flashback.org/t3305870p7 


Web History 


2021-02-17 
a :29:35(UTC+ 


Skottlossning i 
Sundbyberg — en skadad 
| Aftonbladet 


Artifact Family: 


Source Repository 
Path: 


2023-10-20 


14:24:31 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


2023-10-20 
14:24:31 


Skottlossning i https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-17 1 Artifact Family: Source: Safari 

See — en |/man-skadad-efter-skottlossning-i-sundbyberg 01:29:35(UTC+ Account: 

skada 1 ; Service 

Aftonbladet | Source Repository | identifier: 

Path: 
268 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 

Sundbyberg — en skadad 14:24:33 14:24:33 > 
| Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-17 Artifact Family: Source: 
ne — en |/man-skadad-efter-skottlossning-i-sundbyberg 01:29:40(UTC+ KnowledgeC 
skada 1 ; Account: 
Aftonbladet | Source Noro me | Ser vico 
au Identifier: 
269 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
see dec — en skadad 14:24:34 14:24:34 + 
| Aftonbladet 


Skottlossning i https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-17 1 Artifact Family: Source: Safari 

Sane — en |/man-skadad-efter-skottlossning-i-sundbyberg 01:40:45(UTC+ Account: 

skada 1 ; Service 

Aftonbladet ) Source Repository | identifier: 

Path: 
270 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 

Sundbyberg — en skadad 14:24:35 14:24:35 å 
| Aftonbladet 


Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-17 Artifact Family: Source: 

OE — en |/man-skadad-efter-skottlossning-i-sundbyberg 01:40:50(UTC+ KnowledgeC 

skada 1 ; Account: 

Aftonbladet Source Repository || service 

al: Identifier: 
271 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 

Sundbyberg 16 feb 2021 14:24:41 14:24:41 a 
- Sidan 7 - Flashback 
Forum 


Skottlossning 


7 - Flashback 
Forum 


https://www.flashback.org/t3305870p7 


2021-02-17 
01:41:45(UTC+ 
1) 


Artifact Family: 


Source Repository 
Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


272 


Web History 


Skottlossning Tulegatan 
Sundbyberg 16 feb 2021 
- Sidan 7 - Flashback 
Forum 


Evidence 


2023-10-20 


14:24:42 


2023-10-20 
14:24:42 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - Sidan 
7 - Flashback 
Forum 


https://www.flashback.org/t3305870p7 


2021-02-17 
1 :51:40(UTC+ 


Artifact Family: 


Source Repository 
Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Web History 


Skottlossning i 
Sundbyberg — en skadad 
Aftonbladet 


2023-10-20 


14:24:48 


2023-10-20 
14:24:48 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-17 1 Artifact Family: Source: Safari 
A — en |/man-skadad-efter-skottlossning-i-sundbyberg 02:04:52(UTC+ Account: 
skada 1 ; Service 
Aftonbladet ) Bourge Repository Identifier: 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
74 |Weob History Skottiossning’ [Evidence ZUZ3-TU-ZU |gUZ3-TU-ZU 
Sundbyberg — en skadad 14:24:48 
| Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-17 1 Artifact Family: Source: Safari 

be — en |/man-skadad-efter-skottlossning-i-sundbyberg 02:04:52(UTC+ Account: 

skada 1 ; Service 

Aftonbladet Source Repository | identifier: 

Path: 
275 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 

Sundbyberg 16 feb 2021 14:24:54 14:24:54 = 
- Sidan 7 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p7 2021-02-17 Artifact Family: Source: 
Tulggann NG 02:11:20(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository | Service 
7 - Flashback an Identifier: 
Forum 
276 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:24:55 14:24:55 + 
- Flashback Forum 


Skottlossning https://www.flashback.org/t3305870 2021-02-17 1 Artifact Family: Source: Safari 
Lee ea NG 02:11:21(UTC+ Account: 
undbyberg 1 ; Service 
feb 2021 - ) Source Repository | identifier: 
Flashback Path: 
Forum 
277 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:24:56 14:24:56 * 
- Flashback Forum 


Skottlossning https://www.flashback.org/t3305870 2021-02-17 Artifact Family: Source: 
en T 02:11:25(UTC+ KnowledgeC 
un er 1 5 E 

a ) Source Repository Account 

Flashback Path: Identifier: 

Forum 

278 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 

Sundbyberg 16 feb 2021 14:25:19 14:25:19 e 
- Flashback Forum 


Skottlossning https://www.flashback.org/t3305870 2021-02-17 1 Artifact Family: Source: Safari 
Te NG 11:38:51(UTC+ Account: 
undbyberg 1 ; Service 
feb 2021 - ) Source Repository | identifier: 
Flashback Path: 
Forum 
279 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:25:19 14:25:19 ka 
- Sidan 8 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p8 2021-02-17 1 Artifact Family: Source: Safari 
ie 11:38:52(UTC+ Account: 
undbyberg 1 ; Service 
feb 2021 - Sidan | Source Repository | Identifier: 
8 - Flashback Path: 
Forum 
280 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:25:20 14:25:20 a 
- Sidan 8 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p8 2021-02-17 Artifact Family: Source: 
Me å 11:38:55(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository | Service 
8 - Flashback an: Identifier: 
Forum 
281 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:29:49 14:29:49 = 
- Flashback Forum 


Skottlossning https://www.flashback.org/t3305870 2021-02-17 1 Artifact Family: Source: Safari 


lie erm 15:16:40(UTC+ Account 
NAG oy raet ; ervice 
feb 2021 - ) Se Repository | | dentifier: 
Flashback ath: 


Forum 


282 


Web History 2023-10-20 


14:29:49 


2023-10-20 
14:29:49 


Skottlossning Tulegatan | Evidence 
Sundbyberg 16 feb 2021 
- Sidan 9 - Flashback 


Forum 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 235 


Skottlossning https://www.flashback.org/t3305870p9 2021-02-17 1 Artifact Family: Source: 
Me rn NG 15:16:43(UTC+ Account: 
undbyberg 1 ; Service 
feb 2021 - Sidan Source Repository | Identifier: 
9 - Flashback Path: 
Forum 
283 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:29:50 14:29:50 a 
- Sidan 9 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: Source: 
Tulegann RE 15:16:45(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository | Service 
9 - Flashback ain. Identifier: 
Forum 
284 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:29:50 14:29:50 = 
- Sidan 9 - Flashback 
Forum 
Skottlossning  [https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: Source: 
ID 16 15:18:10(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan EE 
9 - Flashback al: Identifier: 
Forum 
285 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:29:51 14:29:51 = 
- Sidan 9 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: Source: 
ne NG 15:19:15(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository Service 
9 - Flashback am: Identifier: 
Forum 
286 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:29:51 14:29:51 4 
- Sidan 9 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: Source: 
Tulegatan | 15:24:05(UTC+ KnowledgeC 
9 - Flashback Fath: Identifier: 
Forum 


287 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:29:52 14:29:52 
- Sidan 9 - Flashback 


Forum 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - Sidan 
9 - Flashback 
Forum 


https://www.flashback.org/t3305870p9 2021-02-17 


ee :55(UTC+ 


Artifact Family: Source: 
KnowledgeC 
Account: 
Service 

Identifier: 


Source Repository 
Path: 


Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:29:52 14:29:52 a 
- Sidan 9 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: Source: 
nn he 15:42:35(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository. Service 
9 - Flashback au: Identifier: 
Forum 
289 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:29:52 14:29:52 = 
- Sidan 9 - Flashback 
Forum 
Skottlossning  [https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: Source: 
TUS 16 15:42:40(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository | Service 
9 - Flashback an: Identifier: 
Forum 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
9 


[Web History 


- Flashback Forum 


SKomossning Tulegatan | 
Sundbyberg 16 feb 2021 


Evidence 


- 236 


Skottlossning 


Flashback 
Forum 


https://www.flashback.org/t3305870 


2021-02-17 
17:16:57(UTC+ 
1) 


Artifact Family: 


Source Repository 
Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Web History 


Skottlossning Tulegatan 
Sundbyberg 16 feb 2021 
- Sidan 9 - Flashback 
Forum 


Evidence 


2023-10-20 
14:30:52 


2023-10-20 
14:30:52 


Skottlossning 
Tulegatan 
Sundbyberg 16 


https://www.flashback.org/t3305870p9 


2021-02-17 1 
ati 


Artifact Family: 


Source Repository 


Source: Safari 
Account: 
Service 


feb 2021 - Sidan : Identifier: 
9 - Flashback Path: 
Forum 
292 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:30:53 14:30:53 e 


- Sidan 9 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: Source: 
ne 7 17:17:00(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repositori || Service 
9 - Flashback an: Identifier: 
Forum 
293 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sen 16 feb 2021 14:30:54 14:30:54 = 
- Sidan 9 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: Source: 
megan 38 17:17:40(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Reposo | Sorvica 
9 - Flashback GU. Identifier: 
Forum 
294 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:31:33 14:31:33 4 
- Sidan 9 - Flashback 
Forum 


Skottlossning 


feb 2021 - Sidan 
9 - Flashback 
Forum 


https://www.flashback.org/t3305870p9 


2021-02-17 
Hedin 


Artifact Family: 


Source Repository 
Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


295 |Web History 


Skottlossning Tulegatan 
Sundbyberg 16 feb 2021 
- Sidan 9 - Flashback 
Forum 


Evidence 


2023-10-20 
14:31:34 


2023-10-20 
14:31:34 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - Sidan 
9 - Flashback 
Forum 


https://www.flashback.org/t3305870p9 


2021-02-17 
(Esto 


Artifact Family: 


Source Repository 
Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


296 |Web History 


Skottlossning Tulegatan 

Sundbyberg 16 feb 2021 

- Sidan 10 - Flashback 
Forum 


Evidence 


2023-10-20 
14:31:34 


2023-10-20 
14:31:34 


Skottlossning https://www.flashback.org/t3305870p10 2021-02-17 Artifact Family: Source: Safari 
Ur NG n: :51:05(UTC+ Account 
undbyberg ; ervice 
feb 2021 - Sidan ) Source Repository Identifier: 
10 - Flashback Path: 
Forum 
297 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:31:35 14:31:35 


- Sidan 10 - Flashback 
Forum 


9802-21 


Calls mm, 2023-11-01 14:47 diarienr: 5000-K18 


MUPS7/WWW.TlasnNback.Org/133U587UPTU 2021-02-17 Artüract Family: Soura 
emndbybera 16 18:51:10(UTC+ Kno 
undbyberg 1 ; Account 
feb 2021 - Sidan Boe Repository Service 
10 - Flashback at Identifier: 
Forum 
298 |Web History Quality Hotel Friends i Evidence 2023-10-20 2023-10-20 
Solna — uppdaterade 14:33:34 14:33:34 = 
priser för 2021 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted 
Quality Hotel https://www.booking.com/hotel/se/quality- 2021-02-17 1 Artifact Family: Source: Safari 
Friends i Solna — |friends.sv.html?label-gen173nr- 20:12:41(UTC+ Account: 
uppdaterade 1FCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyAE | 1 $ Service 
priser för 2021 |N2AEBGAEB- Source Repository | Identifier: 


AELiAIBgAIDuAKI1bWBBsACAdICJDc2MGNjYjg 
5LWZkMJAtNDMyNS 1hMWVhLWYAZTOQ10OTI2Yjl 
OYtgCBuACAQ:;sid-cb602dccc0a7647ccb33ac14 
40501f9a;all sr blocks-54686601 230913440 0 
1 0962C54686601 230913440 O 1 O;checkin- 
2021-02-18;checkout-2021-02-21;dest id-- 

2522526;dest type=city;dist=0;group adults=4;gr 
oup children=0;hapos=1;highlighted blocks=546 
86601 230913440 0 1 0%2C54686601 23091 
3440 0 1 O;hpos=1;matching block id=546866 


01 230913440 O 1 0;no_rooms=2;ref_is_wl=1;r 
eq_adults=4;req_children=0;room1=A%2CA;room 
2=A%2CA;sb_price_type=total;sr_order=popularit 
y;srepoch=1613589148;srpvid=5cad870e5f9a014 
4;type=total;ucfs=1& 


299 |Web History Evidence 2023-10-20 2023-10-20 
14:34:22 14:34:22 a 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted | 
https://www.booking.com/ 2021-02-17 1 Artifact Family: Source: Safari 
20:12:09(UTC+ Account: 
1) ; Service 
Source Repository | Identifier: 
300 |Web History Booking.com | Officiell Evidence 2023-10-20 2023-10-20 
sida| Basta hotellen och 14:34:23 14:34:23 = 
boendealternativen 
Title URL Last Visited Visits Usage Pattern ‚Additional info Source Info Deleted 
Booking.com | https://www.booking.com/index.sv.html?label=gen | 2021-02-17 1 Artifact Family: Source: Safari 
Officiell sida] 173nr- 20:12:09(UTC+ Account: 
Bästa hotellen 1BCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyA | 1) S R 3 Service 
och EN2AEB6AEBiAIBgAIDuAKI 1bWBBsACAdICJDe Ei epository | identifier: 
boendealternativ |2MGNjYjg5LWZkMjAtNDMyNS 1hMWVhLWYAZT ath: 
en Q10TI2YjlOYtgCBeACAQ;sid-cb602dccc0a7647 
ccb33ac1440501f9a;keep landing=1&sb price ty 
pe=total& 
301 |Web History Booking.com | Officiell Evidence 2023-10-20 2023-10-20 
sida| Basta hotellen och 14:34:23 14:34:23 + 
boendealternativen 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted | 
Booking.com | https://www.booking.com/index.sv.html?label=gen | 2021-02-17 Artifact Family: Source: 
Officiell sida] 173nr- 20:12:15(UTC+ KnowledgeC 
Basta hotellen 1BCAEoggl46AdIM1gEaMgBiAECMAEIUAEHyA | 1) s R it Account: 
och EN2AEB6AEBiAIBgAIDuAKI 1bWBBsACAdICJDc Pence epository | cervice 
boendealternativ | 2MGNjYjg5LWZkMjAtNDMyNS1hMWVhLWY4ZT an Identifier: 
en Q10TI2YjI0YtgCBeACAQ;sid=cb602dccc0a7647 
ccb33ac1440501f9a;keep landing=1&sb price ty 
pe=total& 
302 |Web History Booking.com | Officiell Evidence 2023-10-20 2023-10-20 
sida| Båsta hotellen och 14:34:24 14:34:24 a 
boendealternativen 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted | 
Booking.com | https://www.booking.com/index.sv.html?label=gen | 2021-02-17 1 Artifact Family: Source: Safari 
Officiell sida] 173nr- 20:12:15(UTC+ Account: 
Basta hotellen 1BCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyA | 1) S R it Service 
och EN2AEB6ABBIAIBgAIDUAKI1bWBBsACAdICJDc Pathe epository | Identifier: 
boendealternativ |2MGNjYjg5LWZKMjAtNDMyNS 1hMWVhLWYAZT ath: 
en Q10TI2YjI0YtgCBeACAQ;sid=cb602dccc0a7647 
ccb33ac1440501f9a;keep landing=1&sb price ty 
pe=total&#overlay 
303 |Web History Booking.com | Officiell Evidence 2023-10-20 2023-10-20 
sida| Basta hotellen och 14:34:24 14:34:24 = 
boendealternativen 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted | 
Booking.com | https://www.booking.com/index.sv.html?label=gen | 2021-02-17 1 Artifact Family: Source: Safari 
Officiell sida] 173nr- 20:12:20(UTC+ Account: 
Basta hotellen 1BCAEoggl46AdIM1gEaMgBiAECMAEIUAEHyA | 1) S R ^ Service 
och EN2AEB6AEBiAIBgAIDuAKI 1bWBBsACAdICJDe Pah epository | Identifier: 
boendealternativ |2MGNjYjg5LWZKMjAtNDMyNS 1hMWVhLWYAZT aur 
en Q10TI2YjI0YtgCBeACAQ;sid=cb602dccc0a7647 
ccb33ac1440501f9a;keep landing=1&sb price ty 
pe=total& 
304 |Web History Booking.com | Officiell Evidence 2023-10-20 2023-10-20 
sida| Basta hotellen och 14:34:25 14:34:25 - 
boendealternativen 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted 


Officiell sida| 
Básta hotellen 
och 
boendealternativ 
en 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


[mtps7/WWW.DOooKIng.conrmnaex.sv.ntmrzraper-gen] 
173nr- 
1BCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyA 
EN2AEBOAEBIAIBgAIDuAKI1bWBBSACAdICJDc 
2MGNjYjg5LWZKMjAtNDMyNS 1hMWVhLWYAZT 
Q10TI2YjI0YtgCBeACAQ;sid=cb602dccc0a7647 
ccb33ac1440501f9a;keep landing=1&sb price ty 
pe=total&#overlay 


2021-02-17 
20:12:20(UTC+ 
1) 


Aruract Family: 


Source Repository 
Path: 


305 


Web History 


Booking.com | Officiell 
sida] Basta hotellen och 
boendealternativen 


Evidence 


2023-10-20 
14:34:25 


2023-10-20 
14:34:25 


a 


Title 


URL 


Last Visited 


Visits 


Usage Pattern 


Additional info 


Source Info 


Deleted | 


Booking.com | 
Officiell sida| 
Basta hotellen 
och 
boendealternativ 
en 


https://www.booking.com/index.sv.html?label-gen 
173nr- 
1BCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyA 
EN2AEBOAEBIAIBgAIDuAKI1bWBBSsACAdICJDc 
2MGNjYjg5LWZkMjAtNDMyNS1hMWVhLWY4ZT 
Q10TI2YjI0YtgCBeACAQ;sid=cb602dccc0a7647 
ccb33ac1440501f9a;keep landing=1&sb price ty 
pe=total& 


2021-02-17 
20:12:24(UTC+ 
1) 


1 


Artifact Family: 


Source Repository 
Path: 


Source: Safari 
Account: 
Service 
Identifier: 


306 


Web History 


Booking.com | Officiell 
sida| Basta hotellen och 
boendealternativen 


Evidence 


2023-10-20 
14:34:25 


2023-10-20 
14:34:25 


2 


Title 


URL 


Last Visited 


Visits 


Usage Pattern 


Additional info 


Source Info 


Deleted | 


Booking.com | 
Officiell sida] 
Basta hotellen 
och 
boendealternativ 
en 


https://www.booking.com/index.sv.html?label-gen 
173nr- 
1BCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyA 
EN2AEBOAEBIAIBgAIDuAKI1bWBBSsACAdICJDc 
2MGNjYjg5LWZkMjAtNDMyNS1hMWVhLWY4ZT 
Q10TI2YjI0YtgCBeACAQ;sid=cb602dccc0a7647 
ccb33ac1440501f9a;keep landing=1&sb price ty 
pe=total& 


2021-02-17 
20:12:27(UTC+ 
1) 


1 


Artifact Family: 


Source Repository 
Path: 


Source: Safari 
Account: 
Service 
Identifier: 


307 


Web History 


Booking.com : Hotell i 
Solna . Boka hotell nu! 


Evidence 


2023-10-20 
14:34:26 


2023-10-20 
14:34:26 


Title 


URL 


Last Visited 


Visits 


Usage Pattern 


Additional info 


Source Info 


Deleted 


Booking.com : 
Hotell i Solna . 
Boka hotell nu! 


https://www.booking.com/searchresults.sv.html?s 
rc=index&rows=20&error_url=https%3A%2F%2F 
www.booking.com%2Findex.sv.html%3Flabel%3 
Dgen173nr- 
1FCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyAE 
N2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MGNjYjg 
SLWZKMjAtNDMyNS1hMWVhLWYAZTQ10OTI2Yjl 
OYtgCBuACAQ%3Bsid%3Dcb602dccc0a7647ccb 
33ac1440501f9a%3Bsb price type%3Dtotal%26 
%3B&label=gen173nr- 
1FCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyAE 
N2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MGNjYjg 
5LWZkMjAtLNDMyNS1hMWVhLWY4ZTQ1OTI2Yjl 
OYtgCBuACAQ&sid=cb602dccc0a7647ccb33ac1 
440501f9a&sb=1&sb Ip=1&search form id=a6c1 
870414ab0085&ssne-Solna&ssne untouched=S 
olna&checkin monthday=18&checkin year mont 
h=2021- 

2&checkout monthday=21&checkout year mont 
h=2021-2&checkin=2021-02-18&checkout=2021- 
02- 


21&group adults-4&group children=0&no room 
s-2&group adults overlay=4&group children ov 
erlay=0&no rooms overlay=2&lpsr=1&dest type 
=hotel&dest id-546866&ss raw=Solna+fr&ss la 
bel=Quality+Hotel+Friends%2C+Solna%2C+Stoc 
kholms+1%C3%A4n%2C+Sverige&place id lon= 
18.00336938937998place id lat=59.3724157004 
33&ac position=0&ac suggestion list length=2& 
ac langcode=sv&search selected=true&ac size= 
5&ac click type=b&latitude=59.3724157004338&l| 
ongitude=18.0033693893799&search pageview ` 
id=a6c1870414ab0085 


2021-02-17 
20:12:28(UTC+ 
1) 


1 


Artifact Family: 


Source Repository 
Path: 


Source: Safari 
Account: 
Service 
Identifier: 


308 


Web History 


Booking.com : Hotell i 
Solna . Boka hotell nu! 


Evidence 


2023-10-20 
14:34:26 


2023-10-20 
14:34:26 


| a 


Title 


URL 


Last Visited 


Visits 


Usage Pattern 


Additional info 


Source Info 


Deleted 


71 


Booking. 5 
Hotell i Solna . 
Boka hotell nu! 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
rc=index&rows=20&error_url=https%3A%2F%2F 


www.booking.com%2Findex.sv.html%3Flabel%3 
Dgen173nr- 
1FCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyAE 
N2AEB6AEB- 

AELiAIBgAIDuAKI1 bWBBsACAdICJDc2MGNjYjg 
SLWZKMjAtNDMyNS 1hMWVhLWYAZTOQ10OTI2Yjl 
OYtgCBuACAQ%3Bsid%3Dcb602dccc0a7647ccb 
33ac1440501f9a%3Bsb price type%3Dtotal%26 
%3B&label=gen1 73nr- 
1FCAEoggl46AdIM1gEaMgBiAECmAEIuAEHyAE 
N2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MGNjYjg 
5LWZkMjAtNDMyNS1hMWVhLWY4ZTQ10T12Yjl 
OYtgCBuACAQ&sid=cb602dccc0a7647ccb33ac1 
440501f9a&sb=1&sb lp-1&search form id=a6c1 
870414ab0085&ssne-Solna&ssne untouched-S 
olna&checkin monthday=18&checkin year mont 
h=2021- 

2&checkout monthday=21&checkout year mont 
h=2021-2&checkin=2021-02-18&checkout=2021- 
02- 
21&group_adults=4&group_children=0&no_room 
s=2&group adults overlay=4&group children ov 
erlay=0&no rooms overlay=2&lpsr=1&dest type 
=hotel&dest_id=546866&ss_raw=Solna%20fr&ss 
_label=Quality%20Hotel%20Friends%2C%20Sol 
na%2C%20Stockholms%201%C3%A4n%2C%20 
Sverige&place id lon=18.0033693893799&place 
“id lat=59.372415700433&ac position=0&ac su 
ggestion list length=2&ac langcode-sv&search ` 
Selected-true&ac size-5&ac click type-b&latitu 
de=59.372415700433&longitude=18.0033693893 
799&search pageview id-a6c1870414ab0085 


| 2021-02-17 
20:12:29(UTC+ 
1) 


Aruract Family: 


Source Repository 
Path: 


309 


Web History 


Booking.com : Hotell i 
Solna . Boka hotell nu! 


Evidence 


14:34:27 


2023-10-20 


2023-10-20 
14:34:27 


| a 


Title 


URL 


Last Visited 


Visits 


Usage Pattern 


Additional info 


Source Info Deleted | 


Booking.com : 
Hotell i Solna . 
Boka hotell nu! 


https://www.booking.com/searchresults.sv.html?s 
rc=index&rows=20&error_url=https%3A%2F%2F 
www.booking.com%2Findex.sv.html%3Flabel%3 
Dgen173nr- 
1FCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyAE 
N2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MGNjYjg 
5LWZKMJAINDMyNS1NMWVhLWY4ZTQ10TI2YjI 
OYtgCBuACAQ%3Bsid%3Dcb602dccc0a7647ccb 
33ac1440501f9a%3Bsb price type%3Dtotal%26 
%3B&label=gen1 73nr- 
1FCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyAE 
N2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MGNjYjg 
5LWZkKMjAtLNDMyNS1hMWVhLWY4ZTQ1OTI2Yjl 
OYtgCBuACAQ&sid=cb602dccc0a7647ccb33ac1 
440501f9a&sb=1&sb Ip=1&search form id=a6c1 
870414ab0085&ssne=Solna&ssne untouched=S 
olna&checkin monthday=18&checkin year mont 
h=2021- 

2&checkout monthday=21&checkout year mont 
h=2021-2&checkin=2021-02-18&checkout=2021- 
02- 

21&group adults=4&group children=0&no room 
s=2&group adults overlay=4&group children ov 
erlay=0&no rooms overlay=2&lpsr=1&dest type 
=hotel&dest_id=546866&ss_raw=Solna%20fr&ss 
_label=Quality%20Hotel%20Friends%2C%20Sol 
na%2C%20Stockholms%201%C3%A4n%2C%20 
Sverige&place id lon=18.0033693893799&place 
id lat=59.372415700433&ac position=0&ac su 
ggestion list length=2&ac langcode-sv&search ` 
selected=true&ac size=5&ac click type-b&latitu 
de-59.372415700433&longitude-18.0033693893 
799&search pageview id=a6c1870414ab0085 


2021-02-17 
20:12:35(UTC+ 
1) 


Artifact Family: 


Source Repository 
Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


310 


Web History 


priser för 2021 


Quality Hotel Friends i 
Solna — uppdaterade 


Evidence 


14:34:27 


2023-10-20 


2023-10-20 
14:34:27 


P 


Title 


URL 


Last Visited 


Visits 


Usage Pattern 


Additional info 


Source Info Deleted | 


Quality Hotel 
Friends i Solna — 
uppdaterade 
priser fór 2021 


https://www.booking.com/hotel/se/quality- 
friends.sv.html?label=gen173nr- 
1FCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyAE 
N2AEBGAEB- 
AELiAIBgAIDuAKI1bWBBSsACAdICJDc2MGNjYjg 
5LWZkMjAtNDMyNS1hMWVhLWY4ZTQ10TI2Y]I 
OYtgCBuACAQ&sid=cb602dccc0a7647ccb33ac1 
440501f9a&all sr blocks=54686601 230913440 
0 1 0%2C54686601 230913440 0 1 O&check 


in=2021-02-18&checkout=2021-02-21&dest_id=- 
2522526&dest_type=city&group_adults=4&group 
_ children=0&hapos=1 &highlighted_blocks=54686 
601_230913440_0_1_0%2C54686601_ 2309134 


40 0 1 O&hpos-1&no rooms-2&req adults-4&r 
eq_children=0&room1=A%2CA&room2=A%2CA& 
sr_order=popularity&srepoch=1613589148&srpvi 
d=5cad870e5f9a0144&ucfs=1&matching block i 
d=54686601 230913440 O 1 O&ref is wI=1&sr 


hp=1 


2021-02-17 
20:12:40(UTC+ 
1) 


Artifact Family: 


Source Repository 
Path: 


Source: Safari 
Account: 
Service 
Identifier: 


311 |Web History Quality Hotel Friends i Evidence 2023-10-20 2023-10-20 
Solna — uppdaterade 14:34:29 14:34:29 a 
priser för 2021 
Title URL Last Visited Visits Usage Pattern ‚Additional info Source Info Deleted 


Quality 
Friends i Solna — 
uppdaterade 


MIPS7/WWW.DOOKINJ.COM/SEarcNresUlts.SV.NIMT7S | 
rc=index&rows=20&error_url=https%3A%2F%2F 


www.booking.com%2Findex.sv.html%3Flabel%3 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


2021-02-17 
20:12:41(UTC+ 
1) 


Aruract Family: 


Source Repository 


priser for 2021 Dgen173nr- : 
1FCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyAE Path: 
N2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBSACAdICJDc2MGNjYjg 
5LWZkMjAtNDMyNS1hMWVhLWY4ZTQ10TI2Y]I 
OYtgCBuACAQ%3Bsid%3Dcb602dccc0a7647ccb 
33ac1440501f9a%3Bsb price type%3Dtotal%26 
%3B&label=gen1 73nr- 
1FCAEoggl46AdIM1gEaMgBiAECmAEIuAEHyAE 
N2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MGNjYjg 
5LWZkMjAtNDMyNS1hMWVhLWY4ZTQ1OTI2YjI 
OYtgCBuACAQ&sid=cb602dccc0a7647ccb33ac1 
440501f9a&sb=1&sb lp-1&search form id=a6c1 
870414ab0085&ssne-Solna&ssne untouched-S 
olna&checkin monthday=18&checkin year mont 
h=2021- 
2&checkout monthday=21&checkout year mont 
h=2021-2&checkin=2021-02-18&checkout=2021- 
02- 
21&group_adults=4&group_children=0&no_room 
s=2&group_adults_overlay=4&group_children_ov 
erlay=0&no rooms overlay=2&lpsr=1&dest type 
=hotel&dest id=546866&ss raw=Solna+fr&ss la 
bel=Quality+Hotel+Friends%2C+Solna%2C+Stoc 
kholms+1%C3%A4n%2C+Sverige&place id lon= 
18.0033693893799&place id lat=59.3724157004 
33&ac position-0&ac suggestion list length=2& 
ac langcode=sv&search selected-true&ac size= 
5&ac click type-b&latitude-59.372415700433&l 
ongitude=18.0033693893799&search_pageview_ 
E a6c1870414ab0085:highlighted hotels-54686 
312 |Web History Quality Hotel Friends i Evidence 2023-10-20 2023-10-20 
Solna — uppdaterade 14:35:11 14:35:11 a 
priser för 2021 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted | 
Quality Hotel https://www.booking.com/hotel/se/quality- 2021-02-17 Artifact Family: Source: 
Friends i Solna — | friends.sv.html?label=gen173nr- 20:12:45(UTC+ KnowledgeC 
uppdaterade 1FCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyAE | 1 ` Account: 
priser för 2021 |N2AEB6AEB- Source Repository | Service 
AELiAIBgAIDUAKI1bWBBsACAdICJDc2MGNjYjg Path: Identifier: 
5LWZkMjAtNDMyNS1hMWVhLWY4ZTQ1 OTI2Yj! 
OYtgCBuACAQ;sid=cb602dccc0a7647ccb33ac14 
40501f9a;all sr blocks=54686601 230913440 0 
1 0%2C54686601 230913440 O 1 O;checkin- 
2021-02-18;checkout=2021-02-21;dest id=- 
2522526;dest type=city;dist=0;group adults=4;gr 
oup children=0;hapos=1;highlighted blocks=546 
86601 230913440 0 1 0%2C54686601 23091 
3440 0 1 O:hpos-1:matching block id=546866 
01 230913440 O 1 0;no_rooms=2;ref_is_wl=1;r 
eq adults=4;req children=0;room1 =A%2CA; room 
2=A%2CA;sb_price_type=total;sr_order=popularit 
y;srepoch-1613589148;srpvid-5cad870e5f9a014 
4;type=total;ucfs=1& 
313 |Web History oslo - Sök pa Google Evidence 2023-10-20 2023-10-20 
14:35:25 14:35:25 e 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted | 
oslo - Sök pa https://www.google.se/search?q=oslo&ie=UTF- 2021-02-18 1 Artifact Family: Source: Safari 
Google 8&0e=UTF-8&hl=sv-se&client=safari 00:16:05(UTC+ Account: 
1) ; Service 
Source Repository Identifier: 
314 |Web History oslo - Sök på Google Evidence 2023-10-20 2023-10-20 
14:35:26 14:35:26 È 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted | 
oslo - Sök pa https://www.google.se/search?q=oslo&ie=UTF- 2021-02-18 1 Artifact Family: Source: Safari 
Google 8&0e=UTF-8&hl=sv-se&client=safari 00:16:06(UTC+ Account: 
1) ; Service 
Source Repository | Identifier: 
315 |Web History Oslo — Google Maps Evidence 2023-10-20 2023-10-20 
14:36:46 14:36:46 = 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted | 
Oslo — Google https://www.google.com/maps/place/Oslo,+Norge | 2021-02-18 1 Artifact Family: Source: Safari 
Maps /@59.3873913,17.9874414,12z/data=!4m2!3m1!1 | 00:16:57(UTC+ Account: 
S0x4641666112671039:0x7e92605fd3231e9a?hl- | 1) s Ri it Service 
sv-se Pathe epository | identifier: 
316 |Web History Norge till Norge - Google | Evidence 2023-10-20 2023-10-20 
Maps 14:36:53 14:36:53 5 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted 
Norge till Norge | https://www.google.com/maps/dir/Lillestr%C3%B_ | 2021-02-18 1 Artifact Family: Source: Safari 
- Google Maps |8m,+Norge/Oslo,+Norge/@59.9454311,10.90707 | 00:19:22(UTC+ Account: 
76, 10z/data=!4m8!4m7!1m2!1m1!1s0x46417b5f8 | 1) : Service 
2bbf777:0x6021ba6f044063cd!1m2!1m1!1s0x464 Source Repository | erfier. 
16e6112671039:0x7e92605fd3231e9a!3e0?hl=sv- Path: 
se 


317 


Web History 


Norge till Norge — Google | Evidence 
Maps 


2023-10-20 


14:37:08 


2023-10-20 
14:37:08 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


Norge till Norge | https://www.google.com/maps/dir/T %C3%B8nsbe | 2021-02-18 1 Artifact Family: Soure 
— Google Maps |rg,#Norge/Oslo,#Norge/@59.5937976,10.459580 | 00:34:02(UTC+ Account 
4,8z/data=!4m8!4m7!1m2!1m1!1s0x4646b7388d7 | 1) 2 Service 
57dab:0x90ca1 3e6ed9f9a3f1m2!1m11150x46416 Source Repository | identifier: 
e61f267f039:0x7e92605fd3231e9a!3e0?hl=sv-se Path: 
Web History oslo tidszon - Sök pa Evidence 2023-10-20 2023-10-20 
Google 14:37:48 14:37:48 


oslo tidszon - https://www.google.se/search?client=safari&chan | 2021-02-18 Artifact Family: Source: 

Sök på Google |nel-iphone bm&source-hp&ei-6qctYKiyGMn5q | 00:34:25(UTC+ KnowledgeC 
wHst66YCg&q=oslo+tidszon&og=oslo+tid&gs_Icp | 1) s R it Account: 
-ChFtb2JpbGUtZ3dzL Xdpei1ocBABGAlyAggAM ource Repository | Service 
glIADICCAAyAggAMgIIADICCAAyAggAMgYIABA Path: Identifier: 
WEBA46AggpOg4IKRCxAxDHARCjAhCTAjoLCCk 
QxwEQrwEQkwl6CwgpELEDEIMBEJMCOggIAB 
CxAxCDAToICC4QsQMQgwE6CwguELEDEMcB 
EKMCOglILjoF CAAQsQM6CwguELEDEMcBEK8 
BOgUILhCxAzolCCkQsQMQkwIi6CAguEMcBEK8 
BOggILhCxAxCTAjoLCCAQxwEQrwEQkwJQ6hF 
YIXNg- 
oEBaAJwAHgAgAFSiAH1BZIBAzUuM5gBAKABA 
bABDwésclient=mobile-gws-wiz-hp 

Web History oslo tidszon - Sök pa Evidence 2023-10-20 2023-10-20 
Google 14:37:54 14:37:54 


oslo tidszon - 
Sök pa Google 


https://www.google.se/search?client=safari&chan 
nelziphone bm&source-hp&ei-6qctYKiyGMn5q 
wHst66YCg&q=oslo+tidszon&oq=oslo+tid&gs Icp 
=ChFtb2JpbGUtZ3dzLXdpei1ocBABGAlyAggAM 
glIADICCAAyAggAMgIIADICCAAyAggAMgYIABA 
WEB46AggpOg4IKRCxAxDHARCJAhCTAjoLCCk 
QxwEQrwEQkwl6CwgpELEDEIMBEJMCOgglAB 
CxAxCDAToICC4QsQMQgwE6CwguELEDEMcB 
EKMCOglILjoFCAAQsQM6CwguELEDEMCBEK8 
BOgUILhCxAzoICCkQsQMQkwI6CAguEMcBEK8 
BOggILhCxAxCTAjoLCC4QxwEQrwEQkwJQ6hF 
YIXNg- 
oEBaAJwAHgAgAFsiAH1BZIBAZUuM5gBAKABA 
bABDwésclient-mobile-gws-wiz-hp 


2021-02-18 
qu :34:21(UTC+ 


Artifact Family: 


Source Repository 
Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Web History 


Skottlossning Tulegatan 
Sundbyberg 16 feb 2021 
- Flashback Forum 


Evidence 


2023-10-20 
14:38:03 


2023-10-20 
14:38:03 


Skottlossning 


Flashback 
Forum 


https://www.flashback.org/t3305870 


Web History 


2021-02-18 
al 


Skottlossning Tulegatan 
Sundbyberg 16 feb 2021 
- Sidan 12 - Flashback 
Forum 


Evidence 


Artifact Family: 


Source Repository 
Path: 


2023-10-20 
14:38:03 


Source: Safari 
Account: 
Service 
Identifier: 


2023-10-20 
14:38:03 


Skottlossning https://www.flashback.org/t3305870p12 2021-02-18 1 Artifact Family: Source: Safari 
NG a ll Aal 
undbyberg ; ervice 
feb 2021 - Sidan ) Source Repository | identifier: 
12 - Flashback ath: 
Forum 
322 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:38:04 14:38:04 S 


- Sidan 12 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p12 2021-02-18 Artifact Family: Source: 
T nG 04:48:40(UTC+ KnowledgeC 

undbyberg 1 ; Account: 
feb 2021 - Sidan | Source Repository | Service 
12 - Flashback am. Identifier: 
Forum 

323 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:38:09 14:38:09 + 


- Sidan 12 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p12 2021-02-18 Artifact Family: Source: 
Taegan Na 04:49:45(UTC+ KnowledgeC 

undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository Service 
12 - Flashback at Identifier: 
Forum 

324 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:38:10 14:38:10 4 


- Sidan 12 - Flashback 
Forum 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


Skottlossning 


https://www.flashback.org/t3305870p12 


2021-02-18 


Artifact Family: 


- Sidan 12 - Flashback 


TE ie 05:29:10(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan | Source Po | Service 
12 - Flashback ath: Identifier: 
Forum 
325 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:39:12 14:39:12 


Forum 


- Sidan 12 - Flashback 


Skottlossning https://www.flashback.org/t3305870p12 2021-02-18 1 Artifact Family: Source: Safari 
Tulegann RP 1 6:33:40(UTC+ Account 
undbyberg ; ervice 
feb 2021 - Sidan ) Source Repository | identifier: 
12 - Flashback au 
Forum 
326 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:39:13 14:39:13 = 


Forum 


- Sidan 12 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p12 2021-02-18 Artifact Family: Source: 
Tegan 16 16:33:45(UTC+ KnowledgeC 

undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository | Senica 
12 - Flashback an Identifier: 
Forum 

327 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:39:13 14:39:13 E 


Skottlossning https://www.flashback.org/t3305870p12 2021-02-18 Artifact Family: Source: 
ad NG 16:36:15(UTC+ KnowledgeC 
undbyberg 1 ; Account: 

feb 2021 - Sidan Source Ropository | Service 

12 - Flashback an: Identifier: 

Forum 

328 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 

Sundbyberg 16 feb 2021 14:40:16 14:40:16 a 
- Flashback Forum 


- Sidan 2 - Flashback 


Skottlossning https://www .flashback.org/t3305870 2021-02-19 1 Artifact Family: Source: Safari 
Ki NG 01:19:43(UTC+ Account: 
undbyberg 1 ; Service 
feb 2021 - ) Source Repository Identifier: 
Flashback Path: 
Forum 
329 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:40:17 14:40:17 a 


Forum 


Skottlossning 


https://www .flashback.org/t3305870p2 


2021-02-19 
1 :19:45(UTC+ 


Artifact Family: 


Source Repository 
Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Skottlossning Tulegatan 
Sundbyberg 16 feb 2021 
- Sidan 13 - Flashback 
Forum 


Evidence 


2023-10-20 


14:40:17 


2023-10-20 
14:40:17 


Skottlossning https://www.flashback.org/t3305870p13 2021-02-19 1 Artifact Family: Source: Safari 
Hr T 01:19:47 (UTC+ Account: 
undbyberg 1 ; Service 
feb 2021 - Sidan Source Repository | Identifier: 
13 - Flashback Path: 
Forum 
331 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:40:18 14:40:18 a 


- Sidan 13 - Flashback 
Forum 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - Sidan 
13 - Flashback 
Forum 


https://www.flashback.org/t3305870p13 


2021-02-19 
a :19:50(UTC+ 


Artifact Family: 


Source Repository 
Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
3 


| WED History Skottiossning Tulegatan ¡Evidence ZUZ3-TU-ZU | 
Sundbyberg 16 feb 2021 14:40:18 
- Sidan 12 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p12 2021-02-19 Artifact Family: Source: Safari 
Ut NG 01:20:01(UTC+ Account: 
undbyberg 1 ; Service 
feb 2021 - Sidan ) Source Repository Identifier: 
12 - Flashback Path: 
Forum 
333 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:40:19 14:40:19 
- Sidan 12 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p12 2021-02-19 Artifact Family: Source: 
NG 01:20:05(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan | Source Repository Servic 
12 - Flashback am. Identifier: 
Forum 
334 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:40:20 14:40:20 = 
- Sidan 12 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p12 2021-02-19 Artifact Family: Source: 
Tegan NG 01:41:05(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository | Service 
12 - Flashback ath: Identifier: 
Forum 
335 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:40:23 14:40:23 a 
- Sidan 13 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p13 2021-02-19 Artifact Family: Source: Safari 
De he 01:41:17(UTC+ Account: 
undbyberg 1 ; Service 
feb 2021 - Sidan ) Source Repository | identifier: 
13 - Flashback Path: 
Forum 
336 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:40:24 14:40:24 * 
- Sidan 13 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p13 2021-02-19 Artifact Family: Source: 
01:41:20(UTC+ KnowledgeC 
1) Source Repository Account. 

13 - Flashback Path: Identifier: 

Forum 


2023-10-20 
14:40:25 


2023-10-20 
14:40:25 


Web History Skottlossning Tulegatan |Evidence 
Sundbyberg 16 feb 2021 
- Sidan 13 - Flashback 


Forum 


Skottlossning https://www.flashback.org/t3305870p13 2021-02-19 Artifact Family: Source: 

Tulegatan T M :55:35(UTC+ KnowledgeC 
undbyberg ; Account: 

feb 2021 - Sidan Source Repository | Service 

13 - Flashback ath: Identifier: 

Forum 


quattro, Svart / 519hk på 14:53:22 14:53:22 
Biluppgifter.se 


2013 Audi S8 https://biluppgifter.se/fordon/TYK689 2021-02-19 Artifact Family: Source: Safari 
4.0 TFSI quattro, 02:26:19(UTC+ Account: 


338 |Web History 2013 Audi S8 4.0 TFSI | Evidence 2023-10-20 2023-10-20 E 


Svart / 519hk pá 1 ; Service 
Biluppgifter.se Source Repository | identifier: 
Path: 
339 |Web History 2013 Audi S8 4.0 TFSI | Evidence 2023-10-20 2023-10-20 
quattro, Svart / 519hk pa 14:53:24 14:53:24 
Biluppgifter.se 
2013 Audi S8 https://biluppgifter.se/fordon/TYK689#agare 2021-02-19 Artifact Family: Source: Safari 
4.0 TFSI quattro, 02:26:21(UTC+ Account: 
va pa 1 : Service 
Biluppgifter.se Source Repository |l dentiner: 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
34 


m 
(Partille, 27 ar) - 
Merinfo.se 


[Web History 


Evidence 


Kim Mats Bo https://www.merinfo.se/person/Partille/Kim-Mats- | 2021-02-19 il Artifact Family: Source: Safari 
Be (Partille, PRAN elder Gas ` 02:26:23(UTC+ Account: 
7 ar) - a?utm_source=biluppgifter&utm_medium=o | 1 x Service 
Merinfo.se wner&utm_term=person ) pours Repository Identifier: 
341 |Web History Kim Mats Bo Nyman Evidence 2023-10-20 2023-10-20 
ans, 27 ar) - 14:53:30 14:53:30 = 
erinfo.se 


Kim Mats Bo https://www.merinfo.se/person/Partille/Kim-Mats- | 2021-02-19 Artifact Family: Source: 
Bia (Partille, Po Mymang133s/byp Sh. — à 02:26:25(UTC+ KnowledgeC 
7 àr) - a?utm source-biluppgifter&utm medium=0 | 1 ` Account: 
Merinfo.se wner&utm_term=person ) Source Repository Service 
an: Identifier: 
342 |Web History 2013 Audi S8 4.0 TFSI | Evidence 2023-10-20 2023-10-20 
quattro, Svart / 519hk på 14:53:34 14:53:34 = 
Biluppgifter.se 


2013 Audi S8 https://biluppgifter.se/fordon/TYK689#agare 2021-02-19 Artifact Family: Source: 
Se Use 02:26:25(UTC+ KnowledgeC 
va på 1 ; Account: 
Biluppgifter.se pee Repository Service 
an Identifier: 
343 |Web History Evidence 2023-10-20 2023-10-20 
14:53:55 14:53:55 = 


https://www.merinfo.se/search?ae6=Nedre%20Fu | 2021-02-19 1 Artifact Family: Source: Safari 

a I ever eee 02:26:35(UTC+ Account: 

=Partille&d=p 1) : Service 
Seri Repository, Identifier: 

344 |Web History https://www.merinfo.se/s | Evidence 2023-10-20 2023-10-20 
earch?ae6=Nedre%20Fu 14:53:56 14:53:56 * 
ruskogsvägen%204%20I 
deele 

=p 


https://www.meri | https://www.merinfo.se/search?ae6=Nedre%20Fu | 2021-02-19 


nfo.se/search?a 
e6=Nedre%20Fu 
ruskogsvagen% 
204%20Igh%202 
202&ae4=Partill 
e&d= 


ruskogsv%C3%A4gen%204%20I9gh%202202&ae 
4=Partille&d=p 


345 |Web History 


02:26:40(UTC+ 


Skottlossning Tulegatan 
Sundbyberg 16 feb 2021 
- Flashback Forum 


Evidence 


Artifact Family: Source: 
KnowledgeC 
Account: 
Service 


Source Repository 
h: Identifier: 


Pat 


2023-10-20 
14:54:48 


2023-10-20 
14:54:48 


Skottlossning 


Flashback 
Forum 


https://www.flashback.org/t3305870 


2021-02-19 
14:11:23(UTC+ 
1) 


Artifact Family: Source: Safari 
Account: 
Service 


Source Repository Identifier: 


Path: 


Web History 


Skottlossning Tulegatan 
Sundbyberg 16 feb 2021 
- Sidan 13 - Flashback 
Forum 


Evidence 


2023-10-20 
14:54:49 


2023-10-20 
14:54:49 


Skottlossning https://www.flashback.org/t3305870p13 2021-02-19 1 Artifact Family: Source: Safari 
U 16 14:11:24(UTC+ Account: 
undbyberg 1 ; Service 
feb 2021 - Sidan ) Source Repository | identifier: 
13 - Flashback ath: 
Forum 
347 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:54:49 14:54:49 a 


- Sidan 13 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p13 2021-02-19 Artifact Family: Source: 
Ts "s 14:11:25(UTC+ KnowledgeC 

undbyberg 1 ; Account: 
feb 2021 - Sidan Source HERE | Service 
13 - Flashback am: Identifier: 
Forum 

348 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:54:50 14:54:50 + 


- Sidan 12 - Flashback 
Forum 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 245 


Skottlossning https://www.flashback.org/t3305870p12 2021-02-19 1 Artifact Family: Source: 
Me ern ie 14:11:48(UTC+ Account: 
undbyberg 1 ; Service 
feb 2021 - Sidan Source Repository | Identifier: 
12 - Flashback Path: 

Forum 


349 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:54:50 14:54:50 a 
- Sidan 12 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p12 2021-02-19 Artifact Family: Source: 
Tulegann RP 14:11:50(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan | Source Repository | Service 
12 - Flashback an: Identifier: 
Forum 
Web History Google Översätt Evidence 2023-10-20 2023-10-20 
14:57:02 14:57:02 


Google Översätt |https://translate.google.com/?sl=sv&tl=en&text=gr | 2021-02-19 Artifact Family: Source: Safari 
abbarna%20ska%20%C3%A5ka%20ditt%20igen | 14:47:00(UTC+ Account: 
%200ch%20knacka%20p%C3%A5%20d%C3%B | 1) S R it Service 
6rren%200m%20han%20%C3%A4r%20d%C3% Path: P| Identifier: 
A4r%20d%C3%A5%20ta%20med%20honom%2 anr 
O&op-translate 


Web History Google Óversátt Evidence 2023-10-20 2023-10-20 
14:57:25 14:57:25 
Google Översätt |https://translate.google.com/ 2021-02-19 Artifact Family: Source: Safari 
14:46:23(UTC+ Account: 
al) ; Service 
Source Repository Identifier: 
Web History Google Översätt Evidence 2023-10-20 2023-10-20 
14:58:20 14:58:20 
Google Översätt |https://translate.google.com/?sl-sv&tl-en&op-tra | 2021-02-19 Artifact Family: Source: Safari 
nslate 14:48:34(UTC+ Account: 
1) ; Service 
Source Repository Identifier: 
353 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 15:01:01 15:01:01 
- Flashback Forum 


Skottlossning https://www.flashback.org/t3305870 2021-02-19 Artifact Family: Source: Safari 
megan 46 16:04:23(UTC+ Account: 
undbyberg 1 ; Service 
feb 2021 - ) Source Repository |, dentifier: 
Flashback Path: 
Forum 
354 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 15:01:03 15:01:03 
- Flashback Forum 


Skottlossning https://www.flashback.org/t3305870 2021-02-19 Artifact Family: Source: 
Tulegatan 1 16:04:25(UTC+ KnowledgeC 
Sundbyberg 5 1) Source Repository Account 
Flash Path: far 

ashback Identifier: 
Forum 


355 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 
Sundbyberg 16 feb 2021 15:01:04 
- Sidan 13 - Flashback 


Forum 


2023-10-20 
15:01:04 


Skottlossning https://www.flashback.org/t3305870p13 2021-02-19 Artifact Family: Source: Safari 
Ude rad NG He :04:33(UTC+ Account 
unabyberg ; ervice 

feb 2021 - Sidan | Source Repository | identifier: 

13 - Flashback Path: 

Forum 

356 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 15:01:04 15:01:04 a 
- Sidan 13 - Flashback 
Forum 


Bilaga. Calls mm, 2023-11-01 14:47  diarienr: 5000-K189802-21 


246 


i Stockholm — 
uppdaterade priser fór 


Ims 7 WWW .Tasnback-org/t33U587Up T3 2021-02-19 Artüract Family: 
an NG 16:04:35(UTC+ 
undbyber 

feb 2021 - Sidan » Source Repository 

13 - Flashback Path: Identifier: 

Forum 

357 |Web History Courtyard by Marriott Evidence 2023-10-20 2023-10-20 

Stockholm Kungsholmen 15:02:54 15:02:54 * 


Courtyard by https://www.booking.com/hotel/se/courtyard- 2021-02-20 1 Artifact Family: Source: Safari 
Marriott stockholm.sv.html?label=gen1 73nr- 01:19:57(UTC+ Account: 
Stockholm 1DCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyA | 1) ; Service 
Kungsholmen i 7 |EN2AED6AEBiAIBgAlDuALugsGBBsACAdICJDg Source Repository | Identifier: 
Stockholm — | 5NzdhNGJILWQzYTYtNDE0OS1iYWIwLWNmZD Path: 
uppdaterade dkNWRkYZMOM9gCBOACAQ:sid=cb602dccc0a7 
priser för 2021 |647ccb33ac1440501f9ajall sr blocks=17260306 

. 246421916 0 2 0; checkin=2021-02- 

19;checkout=2021-02- 

20:dest_id=1 324;dest_type=district;dist=0;group_ 

adults=2;group_children=0;hapos=1;highlighted_ 

blocks=17260306 246421916 0 2 0;hpos=1;ma 

tching block id=17260306 | 246421916 0 2 0; n 

oc alles 1;ref_is_wl=1;room1=A%2CA;sb_ price 

pe=total;sr - order-popularity; sr pri blocks=17 

200306 | 246421916 0 2 0 80300; srepoch-16 

13780374;srpvid=6fb1024af9220203;type=total;u 

cfs=18 

358 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 15:03:54 15:03:54 = 
- Flashback Forum 


- Sidan 13 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870 2021-02-20 1 Artifact Family: Source: Safari 
Le eae fe 1 5:13:59(UTC+ Account 
unabyberg ; ervice 
feb 2021 - i Source Repository | Identifier: 
Flashback ath: 
Forum 
359 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 15:03:55 15:03:55 e 


- Sidan 13 - Flashback 


Skottlossning https://www.flashback.org/t3305870p13 2021-02-20 Artifact Family: Source: Safari 
de 16 15:14:00(UTC+ Account: 
undbyberg 1 ; Service 
feb 2021 - Sidan ) Source Repository | Identifier: 
13 - Flashback Path: 
Forum 
360 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 15:03:56 15:03:56 + 


Forum 


- Sidan 13 - Flashback 


Skottlossning _| https://www.flashback.org/t3305870p13 2021-02-20 Artifact Family: Source: 
megan " 15:14:05(UTC+ KnowledgeC 

undbyberg 1 ; Account: 
feb 2021 - Sidan l Source Repository Service 
13 - Flashback an Identifier: 
Forum 

361 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 15:03:56 15:03:56 a 


Forum 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - Sidan 
13 - Flashback 
Forum 


https://www.flashback.org/t3305870p13 


2021-02-20 
15:41:45(UTC+ 
1) 


Artifact Family: 


Source Repository 
Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


362 


Web History 


STF af Chapman & 
Skeppsholmen i 
Stockholm — 
uppdaterade priser för 


Evidence 


15:05:21 


2023-10-20 


2023-10-20 
15:05:21 


Bilaga 1. Calls mm, 2023- d -01 14:47 diarienr: 5000-K189802-21 


WWW. 2021-02-20 it Artiract Family: Source sata 
& Skeppsholmen chapman. sv. htmi?label= gen173nr- 23:07:55(UTC+ Acco! nt HEMLIG 
i Stockholm — 1DCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyA | 1) S R it Service 
uppdaterade EN2AED6AEBiAIBgAIDuALPjcaBBsACAdICJDE pal epository | Identifier: 
priser för 2021 | SNTY1MzgOLWIwODctNDEOMy04N2ZhLTZjMG ath: 
MyYjg2MTU2ZtgCBOACAQ&sid=cb602dccc0a76 
47ccb33ac1440501f9a&all_sr_blocks=29772913_ 
91471534 1 2 O&checkin=2021-02- 
20&checkout-2021-02-21&dest id-- 
2524279&dest type-city&group adults-1&group 
children=0&hapos=53&highlighted_blocks=2977 
2913 91471534 1 2 O&hpos-13&no rooms-1& 
req adults=1&req children=0&room1=A&sr orde 
r=popularity&sr pri blocks=29772913 91471534 
120 24299&srepoch=1613858753&srpvid=9 
0a29b602565015a&ucfs- 1&matching block id-2 
9772913 91471534 1 2 O&srhpz1&ref is wl=1 
363 |Web History scandic stockholm - Sök | Evidence 2023-10-20 2023-10-20 
pa Google 15:05:26 15:05:26 a 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted | 
scandic https://www.google.se/search?q=scandic+stockh | 2021-02-20 1 Artifact Family: Source: Safari 
stockholm - Sök |olm&ie=UTF-8&0e=UTF-8&hl=sv-se&client=safari | 23:08:44(UTC+ Account: 
pa Google 1) ; Service 
Source Repository Identifier: 
364 |Web History radisson blu - Sök på Evidence 2023-10-20 2023-10-20 
Google 15:05:33 15:05:33 a 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted | 
radisson blu - https://www.google.se/search?q=radisson+blu&ie | 2021-02-20 1 Artifact Family: Source: Safari 
Sök pá Google |=UTF-8&0e=UTF-8&hl=sv-se&client=safari 23:09:36(UTC+ Account: 
1) ; Service 
Source Repository, Identifier: 
365 |Web History First Hotel Kungsbron Evidence 2023-10-20 2023-10-20 
15:05:37 15:05:37 + 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted | 
First Hotel https://www.google.se/travel/hotels/first20hotel/ | 2021-02-20 d Artifact Family: Source: Safari 
Kungsbron entity/CgoltqzgOuXh2uNBEAE?g2lb-2502548,25 | 23:09:55(UTC+ Account: 
03781 ,2503839,4258 168,4306835,4308227,4317 | 1) S B ; Service 
915,4328159,4371335,4401769,4419364,446366 Pathe epository | identifier: 
6,4466980,4482194 4482438 4486153,4491350, au. 
4495816,4496891,4503422,4270859,4284970&hl 
=SV- 
SE&gl-se&ap-aAE&grf-ErEBCiwIDhloEiZyJCoi 
Cgcl5Q8QAxgOEgcl5Q8QAxgPIAAwHKDKAKOH 
COUPEAIYFBIKCAcoAToEOglgARIPCAgoAToH 
QgU18j4YAUABEgslEygCOgWaAQIIARoLCBMS 
BwoFmgECCAEaAggOGklIBxIOCgw6CgoDCNIG 
GgNTRUsSDgoMOgoKAwiaCBoDUOVLEg4KDD 
oKCgMl4gkaA1NFSxlOCgw6CgoDCKoLGgNTR 
UsiAiAB&q=firstthotel&rp=ELas4NLI4drjQRCHzI 
Puhoi35ssBEKyB6YaBoNK47gEQ2K- 
04 HtoMPMATgCQAFIA6IBCVNOb2NraG9sbcA 
BA8gBAA&ictx=1&ved=2ahUKEwi1xbydvfnuAhXI 
T8AKHQUnBQoQvS4wAHoECAMQHQ 
366 |Web History First Hotel Kungsbron Evidence 2023-10-20 2023-10-20 
15:06:10 15:06:10 A 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted | 
First Hotel https://www.google.se/travel/hotels/first%20hotel/ | 2021-02-20 1 Artifact Family: Source: Safari 
Kungsbron entity/CgoltqzgOuXh2uNBEAE ?g2lb=2502548%2 | 23:10:24(UTC+ Account: 
C2503781%2C2503839%2C4258168%2C43068 | 1) s R 5 Service 
35%2C4308227%2C4317915%2C4328159%2C4 Baa epository | identifier: 
371335%2C4401769%2C4419364%2C4463666 an: 
%2C4466980%2C4482194%2C4482438%2C448 
6153%2C4491350%2C4495816%2C4496891%2 
C4503422%2C4270859%2C4284970&hl=sv- 
SE&gl=se&ap=aAE&q=first%20hotel&rp=ELas4N 
Ll4drjgRCHziPuhoi35ssBEKyB6YaBoNK47gEQ2 
K- 
04 HtoMPMAaIBCVNOb2NraG9sbTgBQAFIAw&i 
ctx=1&sa=X&utm_campaign=sharing&utm_mediu 
m-link&utm source-htls&ts-CAESABozChUSET 
oPbsOkcmEgU3RvY 2tob2xtGgASGhIUCgcl5Q8 
QAxgOEgcl5Q8QAxgPGAEyAhAAKg8KCygBSgl 
gAToDUOVLGgA 
367  |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 15:06:58 15:06:58 > 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted | 
E-post -mahad  |https://outlook.live.com/mail/O/inbox 2021-02-20 1 Artifact Family: Source: Safari 
alii - Outlook 23:31:19(UTC+ Account: 
1) ; Service 
Source Repository | Identifier: 
368 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 15:08:14 15:08:14 * 
- Flashback Forum 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted 


80 


- Sidan 13 - Flashback 
Forum 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 248 

Skottl T [NPS 7/7 WWW .TASNDACK.OrgTS3U587U 2021-02-21 1 Aruract Family: Sourq 
De 46 02:35:39(UTC+ Acco 

undbyberg 1 : Servid 
feb 2021 - | Source Repository | identifier: 
Flashback Path: 
Forum 

369  |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 

Sundbyberg 16 feb 2021 15:08:15 15:08:15 * 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - Sidan 
13 - Flashback 
Forum 


Web H 


https://www.flashback.org/t3305870p13 


istory 


2021-02-21 
oe 


Skottlossning Tulegatan 
Sundbyberg 16 feb 2021 
- Sidan 13 - Flashback 
Forum 


Evidence 


Artifact Family: 


Source Repository 
Path: 


2023-10-20 
15:08:15 


Source: Safari 
Account: 
Service 
Identifier: 


2023-10-20 
15:08:15 


Skottlossning https://www.flashback.org/t3305870p13 2021-02-21 Artifact Family: Source: 
NG 02:35:45(UTC+ KnowledgeC 
undbyberg 1 ; Account: 

feb 2021 - Sidan Source Repository | Service 

13 - Flashback ath: Identifier: 

Forum 

371 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 

Sundbyberg 16 feb 2021 15:09:22 15:09:22 = 
- Flashback Forum 


Skottlossning https://www.flashback.org/t3305870 2021-02-21 1 Artifact Family: Source: Safari 
Tulegatan få 03:38-19(UTOE Account: 
undbyberg ; ervice 

feb 2021 - | Source Repository | Identifier: 

Flashback ath: 

Forum 

372 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 

Sundbyberg 16 feb 2021 15:09:23 15:09:23 a 
- Flashback Forum 


- Sidan 13 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870 2021-02-21 Artifact Family: Source: 
er NG 03:36:20(UTC+ KnowledgeC 

un er , å 
feb 2031 S g 1) Source Repository Account 
Flashback Path: Identifier: 
Forum 

373 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 15:09:24 15:09:24 a 


- Sidan 13 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p13 2021-02-21 1 Artifact Family: Source: Safari 
Le eae fe pe se SOLER Account: 
undbyberg ; Service 
feb 2021 - Sidan Source Repository | |gentifier: 
13 - Flashback Path: 
Forum 
374 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 15:09:25 15:09:25 i 


Skottlossning ^ |https://www.flashback.org/t3305870p13 2021-02-21 Artifact Family: Source: 
[Une 16 03:36:35(UTC+ KnowledgeC 
undbyberg 1 ; Account: 

feb 2021 - Sidan | Source Repository || Service 

13 - Flashback am: Identifier: 

Forum 

375 |Web History Efterlyst 2021 Evidence 2023-10-20 2023-10-20 

skottlyssning 15:11:37 15:11:37 a 
stundbyberg - YouTube 


Efterlyst 2021 https://m.youtube.com/results?sp-mAEA8search | 2021-02-21 1 Artifact Family: Source: Safari 
So and _query=Efterlyst+2021+skottlyssning+stundbyber | 03:37:42(UTC+ Account: 
stundbyberg - g 1 ; Service 
YouTube | Source Repository | Identifier: 
Path: 
376 |Web History Google Översätt Evidence 2023-10-20 2023-10-20 
15:13:20 15:13:20 5 


oo 


a 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
2021-02-21 
1 y :10:56(UTC+ 


| Nttps‘7/translaté.google.Se/7nI=SV 


Artiract Family: 


Source Repository 
Path: 


Identifier: 


Web History 


Google Översätt 


2023-10-20 


15:13:25 


2023-10-20 
15:13:25 


Google Oversatt 


https://translate.google.se/?hl-sv&sl-auto&tl-en& 
text=guys%20have%20info%20about%20he%20f 
arah%20fick%20h%C3%B6ra%20att%20han%20 
och%20hans%20v%C3%A4nner%20%C3%A4r% 
20i%20krig%20mot%20n%C3%A5rgra%20andra 

%20som%20bor%20i%200m%C3%A5rdet%20mi 
na%20v%C3%A4nner%20k%C3%A4nner%20de 
ssa%20killar%20tror%20att%20de%20kan%20ta 

%20fram%20farah%20men%20de%20%C3%A4r 
%20inte%20100%25%20leta%20efter%20ni%20 

ET NN SAL a a 
anslate 


2021-02-21 
11:11:24(UTC+ 
1) 


Artifact Family: 


Source Repository 
Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Web History 


Google Översätt 


Evidence 


2023-10-20 


15:13:26 


2023-10-20 
15:13:26 


Google Översätt |https://translate.google.se/?hl=sv&sl=auto&tl=en& | 2021-02-21 il Artifact Family: Source: Safari 
op=translate 11:18:25(UTC+ Account: 
1) Å Service 
Source Repository Identifier: 
379 |Web History Hyra bil - Boka hyrbil Evidence 2023-11-01 2023-11-01 
direkt på nätet | Hertz 11:12:01 11:12:01 = 
Biluthyrning 


Hyra bil - Boka  |https://www.hertz.se/rentacar/reservation/?gclid= | 2021-02-23 1 Artifact Family: Source: Safari 
hyrbil direkt pa |EAlalQobChMI9MeQ8eH- 01:39:48(UTC+ Account: 
natet | Hertz 7glVj5KyCh3PRAh9EAAYASAAEgLND_D_BwEß | 1) : Service 
Biluthyrning gclsrc=aw.ds#vehicles poe Repository Identifier: 
380 |Web History Hyra bil - Boka hyrbil Evidence 2023-11-01 2023-11-01 
direkt pa natet | Hertz 11:13:49 11:13:49 B 
Biluthyrning 


Hyra bil - Boka |https://www.hertz.se/rentacar/reservation/?gclid= | 2021-02-23 1 Artifact Family: Source: Safari 
hyrbil direkt på | EAlalQobChMI9MeQ8eH- 01:37:11(UTC+ Account: 
natet | Hertz 7glVj5KyCh3PRAh9EAAYASAAEgLND_D_BwEß | 1) R : Service 
Biluthyrning gclsrc=aw.ds Source epository Identifier: 
381 |Web History sixt - Sök på Google Evidence 2023-11-01 2023-11-01 
11:14:21 11:14:21 a 
sixt - Sök pa https://www.google.se/search?client-safari&chan | 2021-02-23 d Artifact Family: Source: Safari 
Google nel=iphone bm&source-hp&ei- 040YKrvBobSk | 01:40:36(UTC+ Account: 
wXK1764Dg&q-sixt&gs ssp=eJzj4tTP1TcwyTY1 | 1) S R it Service 
NFJgNGBOYPBiKc6sKAEAMyUE79&oq-six&gs | ource Repository | Identifier: 
cp-ChFtb2JpbGUtZ3dzLXdpei1ocBABGAAyDgg Path: 
uELEDEMcBEKMCEJMCMggILhDHARCvATIFC 
C4QsQMyCAguEMcBEK8BMglIILjIFCAAQsQMyB 
QgAELEDMgUILhCxAzoOCCkQsQMQxwEQowl 
QkwI6BQgpELEDOgUIKRCgAToCCCK6DQgpE 
McBEKMCEEMQkwl6CwgpEMcBEK8BEJMCOg 
YIKRAWEB46CAgAELEDEIMBOg4ILhCxAxCDA 
RDHARCjAjoLCCAQsQMQxwEQowl6CwguELED 
EIMBEJMCOgIIADoLCC4QsQMQxwEQrwFQjRN 
Y8BhgwCVoAHAAeACAAdgBiAGBBJIBBTAuMi4 
xmAEAoAEBSAEP&sclient=mobile-gws-wiz-hp 
382 |Web History Offerselect Evidence 2023-11-01 2023-11-01 
11:14:25 11:14:25 å 


Offerselect https://www.sixt.se/php/reservation/offerselect 2021-02-23 Artifact Family: Source: 
01:46:20(UTC+ KnowledgeC 
Y Source Repository Account 
Path: Identifier: 
383 |Web History Car Rental - Rent a new | Evidence 2023-11-01 2023-11-01 
Car & Van Worldwide | 11:17:08 11:17:08 + 
Europcar 


Car Rental - https://www.europcar.com/en- 2021-02-23 1 Artifact Family: Source: Safari 
an 7g yCh1yEw gJJcvD BwE | 1 a Service 
Worldwide | &gclsrc=aw.ds | Source Repository Identifier: 
Europcar Path: 
384 |Web History Select extras | Europcar |Evidence 2023-11-01 2023-11-01 
11:17:13 11:17:13 = 
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Selec mips77m.europcar.conmvactuon/adadExmras 2021-02-23 1 Artiract Family: Source Sata 
Europe 03:22:42(UTC+ Acco 
1) Source Repository Servite HEMLIG 
Path: Identifier: 
385 |Web History Hyra Bil Snabbt pa Natet | Evidence 2023-11-01 2023-11-01 
- Hyrbil till ett Bra Pris — 11:18:41 11:18:41 a 
Avis 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted 
Hyra Bil Snabbt |https://www.avis.se/?kpid=site-google_camp- 2021-02-23 1 Artifact Family: Source: Safari 
pa Nätet - Hyrbil |1848901830 adgroup-69500277533 target-aud- | 03:35:37(UTC+ Account: 
till ett Bra Pris — |531416943069:kwd-13402896 creative- 1) 3 Service 
Avis 346475790704. device-m feed- Source Repository | Identifier: 


&gclid-EAlalQobChMIx4WTrvz- 
7glVw9myCh11eglcEAAYASAAEgJsr_D_BwE 


Path: 


386 |Web History Tillgängliga fordon Evidence 2023-11-01 2023-11-01 
11:18:54 11:18:54 = 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted 
Tillgangliga https://secure.avis.se/car- 2021-02-23 Artifact Family: Source: 
fordon results ?vehicleCategory=default&exclusiveSearc | 03:36:45(UTC+ KnowledgeC 
h=&fccFallBackAwdCode=&fccRecg=&fromSRP= | 1) 3 Account: 
&require-mobile- Source Repository | Service 
logout=&partnerBrand=&locationBrand=avis&dro Path: Identifier: 
pLocationBrand=&budgetPickupLocCode=&budg 
etDropoffLocCode=&hire-country=GB&hire- 
search=Stockholm+Bromma+flygplats+- 
* SWE&hire-locationzBMA&station- 
type=airport&date- 
from=23%2F02%2F2021 &time-from- 1500&time- 
from-hours=15&time-from-minutes=00&return- 
search=&return-location=&return-station- 
type=airport&date-to=28%2F02%2F 2021 &time- 
to=1500&time-to-hours=15&time-to- 
minutes=00&hideAwdNumber=false&loactionRe 
markList=&hideAwdCodeAndMessage=false&yds 
applicable=1&dd=&yy=&mm=&awdcode=&rental 
Period=5&driverDob=&isUasorSds= 
387 |Web History Booking.com : Hotell i Evidence 2023-11-01 2023-11-01 
Karlstad . Boka hotell nu! 13:30:11 13:30:11 = 
Title URL Last Visited Visits Usage Pattern ‚Additional info Source Info Deleted 
Booking.com : https://www.booking.com/searchresults.sv.html?s | 2021-02-25 1 Artifact Family: Source: Safari 
Hotell i Karlstad . | rc=index&rows=20&error_url=https%3A%2F %2F 11:00:47(UTC+ Account: 
Boka hotell nu! | www.booking.com%2Findex.sv.html%3Flabel%3_ | 1) 8 Service 
Dgen173nr- Source Repository Identifier: 


1DCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyA 
EN2AEDGAEBIAIBgAIDuAKIGt2BBsACAdICJDJj 
NjQzMTEyLTIKYWUtNDYzOC1iMDImLTU3Y2Ez 
OWZjNmM4NtgCBOACAQ%3Bsid%3Dcb602dcc 
c0a7647ccb33ac1440501f9a%3Bsb_price_type% 
3Dtotal%26%3B&label=gen173nr- 
1DCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyA 
EN2AEDGAEBIAIBgqAIDuAKIGt2BBsACAdICJDJj 
NjQzMTEyLTIKYWUtNDYzOC1iMDImLTU3Y2Ez 
OWZjNmM4NtgCBOACAQ&sid=cb602dccc0a764 
7ccb33ac1440501f9a&sb=1&sb_lp=1&search_for 
m_id=cec84653387b0036&checkin_monthday=2 
5&checkin_year_month=2021- 
2&checkout_monthday=26&checkout_year_mont 
h=2021-2&checkin=2021-02-25&checkout=2021- 
02- 
26&group_adults=4&group_children=0&no_room 
s=2&group adults overlay=4&group children ov 
erlay=0&no rooms overlay=2&lpsr=1&dest type 
=city&dest id=- 
2493635&ss_raw=kar&ss_label=Karlstad%2C+V 
%C3%A4rmland%2C+Sverige&place_id_lon=13. 
500731&place_id_lat=59.379671&ac_position=0 
&ac_suggestion_list_length=5&ac_langcode=sv& 
search selected=true&ac size=5&ac click type= 
b&latitude=59.37967 1 &longitude=13.500731&sea 


rch_pageview_id=cec84653387b0036 


Path: 


388 |Web History Best Western Gustaf Evidence 2023-11-01 2023-11-01 
Froding Hotel & 13:30:14 13:30:14 a 
Konferens i Karlstad — 
uppdaterade priser fér 
2021 
Title URL Last Visited | Visits | Usage Pattern Additional info Source Info Deleted 
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Best 
Gustaf Froding 
Hotel & 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
11:01:20(UTC+ 
1) 


TIWWW. Ing. -W = 
gustaf-froding-hotell- 
konferens.sv.html?label=gen173nr- 


Artiract Family: 


Source Repository 


Konferens i 1DCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyA Path: Service 

Karlstad — EN2AED6ABBIiAIBgAIDuAKI6t2BBsACAdICJDJj ath: Identifier: 

uppdaterade NjQZMTEyLTIkYWUtNDYZOC1iMDImLTU3Y2Ez 

priser för 2021 | OWZjNmM4NtgCBOACAQ;sid=cb602dccc0a764 
7ccb33ac1440501f9a;all sr blocks=1843619 26 
4821228 2 1 0%2C1843619 264821228 21 
O;checkin=2021-02-25;checkout=2021-02- 
26;dest_id=- 
2493635;dest_type=city;dist=0;group_adults=4;gr 
oup_children=0;hapos=4;highlighted_blocks=184 
3619 264821228 2 1_0%2C1843619 2648212 
28 2 1 O;hpos-4;matching block id=1843619 ` 
264821228 2 1 0;no rooms-2;ref is wiiren 
adults=4;req_children=0;room1=A%2CA;room2= 
A%2CA;sb_price_type=total;sr_order=popularity; 
srepoch=1614247247;srpvid=a9644667bb1b0080 
;type=total;ucfs=1& 

389 |Web History Bekråftelse - Evidence 2023-11-01 2023-11-01 
Booking.com 13:30:18 13:30:18 = 

Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted 

Bekräftelse - https://secure.booking.com/confirmation.sv.html?l | 2021-02-25 Artifact Family: Source: 

Booking.com abel=gen173nr- 8 11:06:50(UTC+ KnowledgeC 
1DCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyA | 1) s Ri d Account: 
EN2AED6AEBIAIBGAIDuAKI6t2BBSACAdICJDJj Pi epository | Service 
NjQZMTEyLTIkYWUtNDYZOC1iMDImLTU3Y2Ez ath: Identifier: 
OWZjNmMANtgCBOACAQ;sid-cb602dccc0a764 
7ccb33ac1440501f9a;auth key=rZPn3J4Y3F3Ag 
Qn2;bp travel purpose=leisure;hostname=www. 
booking.com;source=book;ua created-0& 

390 |Web History Bekråftelse - Evidence 2023-11-01 2023-11-01 
Booking.com 13:32:48 13:32:48 * 

Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted | 

Bekráftelse - https://secure.booking.com/confirmation.sv.html?l | 2021-02-25 1 Artifact Family: Source: Safari 

Booking.com abel=gen173nr- 11:06:42(UTC+ Account: 
1DCAEoggl46AdIM1gEaMgBiAECmAEIuAEHyA | 1 : Service 
ENZAEDGAEBIAIBAAIDUARIGTZBBSACAGICHDN] | Source Repository | identifier: 
NjQZMTEyLTIkYWUtNDYZOC1iMDImLTU3Y2Ez au 
OWZjNmMA4NtgCBOACAQ; sid=cb602dccc0a764 
7ccb33ac1440501f9a;auth key=rZPn3J4Y3F3Ag 
Qn2;bp travel purpose=leisure;hostname=www. 
booking.com;source=book;ua created=0& 

391  |Documents 11BEBE49-2BDF-4872- |Evidence 2023-11-01 2023-11-01 
8D8B- 13:42:38 13:42:38 = 
8CA0A61AF690.pdf 

File Info Additional file info Deleted | 

Name: 11BEBE49-2BDF-4872-8D8B- Size (bytes): 200720 

EE Created: 2021-02-18 16:34:10(UTC+1) 
Path: 373fd2e35eced361b8ff2ca4a54ab4207fa933 PRIN VU 
45 files full.zip/private/var/mobile/Container Modified: 2021-02-18 16:34:10(UTC+1) 
s/Data/Application/06B4B7A0-A991-4F2E- Accessed: 2021-02-18 16:34:10(UTC+1) 
B94A-D6285790191B/tmp/11BEBE49-2BDF- 
4872-8D8B-8CA0A61AF690.pdf 

MD5: fde4b53024c5eba28216eebe8931e2f7 
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@ 


Extraction Report - Apple iOS Full File system 


' Cellebrite 


www.cellebrite.com 


Data Files (79) 


Images (79) 
# File Info Additional file info Thumbnail | Deleted | 
1 | Name: IMG. 0012.PNG Size (bytes): 355811 en 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-13 18:54:32(UTC+1) == 
42071293345 files full.zip/private/v VE Ge == 
ar/mobile/Media/DCIM/100APPLE/I | Modified: ee) 
MG_0012.PNG Accessed: 2021-02-13 18:54:32(UTC+1) = 
MD5: 840e6aa3ef50750f477e00997ffd9b | Source file 373fd2e35eced361b8ff2ca4a54ab 
5e 4207fa93345 files full.zip/private/v === s 
ar/mobile/Media/DCIM/100APPLE/I 
MG. 0012.PNG : 0x0 (Size: 355811 
bytes) 
? | Name: IMG_0014.PNG Size (bytes): 570799 = 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-13 20:32:37(UTC+1) 
4207fa93345_files_full.zip/private/v Han: .29- 
ar/mobile/Media/DCIM/100APPLE/ | Modified: 2021-02-13 20:32:37 (UTC 1) 
MG 0014.PNG Accessed: 2021-02-13 20:32:37(UTC+1) 
MD5: 3d9f6d0155703abdd900b9834cd9 | Source file 373fd2e35eced361b8ff2ca4a54ab | i. e 
9b1e 4207fa93345_files_full.zip/private/v | * — * 
ar/mobile/Media/DCIM/100APPLE/I 
MG 0014.PNG : 0x0 (Size: 570799 
bytes) 
3 Name: 9245822445086699840 Size (bytes): 72097 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-14 16:37:57(UTC+1) 
4207fa93345_files_full.zip/private/v d A 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-14 16:37:57(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-16 16:46:03(UTC+1) 
O a Source NIB 373fd2e35eced361b8ff2ca4a54ab 
nap.file_manager_3_SCContent_ca 42 ‘ à A 
ee een een 
ar 
len 0n/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
MD5: 6e634e6bb6c96333ab47e4ace120 nap.file_manager_3_SCContent_ca 
5b53 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/9245822445086699 
840 : 0x0 (Size: 72097 bytes) 
Meta Data: 
Pixel resolution: 750x998 
Orientation: Horizontal (normal) 
4 Name: 6357297960555303251 Size (bytes): 43357 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-14 16:37:59(UTC+1) 
4207fa93345_files_full.zip/private/v GSM EE) 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-14 16:37:59(UTC+1) 
on/77919778-DC8B-4FED-9F 7E- Accessed: 2021-02-16 16:50:00(UTC+1) 
Se ee ee ee | Source fs 373fd2e35eced361b8ff2ca4a54ab 
nap.file manager 3 SCContent ca : å : 
10df2d-08df-4a1c-b8fe- d of SCH | Paa aa parey 
ar/mobile/Containers/Data/Applicati 
36109f9b03d/6357297 960555303 0n/77919778-DC8B-4FED-9F7E. 
0DB1B276E89C/Documents/com.s 
MD5: e17f7601d9da9dea06b7c49c87c8f nap.file manager 3 SCContent ca 
958 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/6357297960555303 
251 : 0x0 (Size: 43357 bytes) 
Meta Data: 
Pixel resolution: 750x376 
Orientation: Horizontal (normal) 
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Pixel resolution: 


Orientation: 


1142x2114 


Horizontal (normal) 


Name: 5110148730146474392 Size (bytes): 145993 HEMI I © 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-14 23:05:37(UTC+1) 
4207fa93345_files_full.zip/private/v Fern, “OE: 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-14 23:05:37 (UTC+1) 
oni T9197 18 DEER EED- 9F E Accessed: 2021-02-14 23:05:37 (UTC+1) 
ocuments/com.s 
nap file. manager. 3 SCContent ca | Source file 42071283348 fles full zipiprivately | 7° 
ar/mobile/Containers/Data/Applicati 
96f409f9b03d/5110148730146474 0n/77919778-DC8B-AFED-9F7E- 
SEE 0DB1B276E89C/Documents/com.s 
MD5: 66250c1f201f85f37a41587ea843e nap.file_manager_3_SCContent_ca 
9a5 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/5110148730146474 
392 : 0x0 (Size: 145993 bytes) 
Meta Data: 
Pixel resolution: 1142x2114 
Orientation: Horizontal (normal) 
6 Name: 42233659368951 14432 Size (bytes): 273054 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-14 23:05:37(UTC+1) 
4207fa93345_files_full.zip/private/v ads “OE: 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-14 23:05:37(UTC+1) 
on/77919778-DC8B-4FED-9F 7E- Accessed: 2021-02-14 23:05:37(UTC+1) 
Goen EE Source file 373fd2e35eced361b8ff2ca4a54ab 
10df2d-08df-4a1c-b8fe- 4207fa93345 files full.zip/private/v 
96f409f9b03d/4223365936895 114 nt 
a 0DB1B276E89C/Documents/com.s 
MD5: 260cf0272d51bde049b0aed0b5c1 nap.file_manager_3_SCContent_ca 
78cb 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/42233659368951 14 
432 : 0x0 (Size: 273054 bytes) 
Meta Data: 
Pixel resolution: 1148x2122 
Orientation: Horizontal (normal) 
7 Name: 3010178063877366598 Size (bytes): 223567 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-14 23:05:37(UTC+1) 
4207fa93345_files_full.zip/private/v EVE “OE: 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-14 23:05:37(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-14 23:05:37(UTC+1) 
paa an Source file 373fd2e35eced361b8ff2ca4a54ab 
10df2 d-08df-4a1c-b8fe- = 4207fa93345_files_full.zip/private/v 
96409f9b03d/3010178063877366 EE 
EE 0DB1B276E89C/Documents/com.s 
MD5: d30d633bae28a246766379345f9e nap.file_manager_3_SCContent_ca 
1087 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/3010178063877366 
598 : 0x0 (Size: 223567 bytes) 
Meta Data: 
Pixel resolution: 1142x2114 
Orientation: Horizontal (normal) 
8 Name: 11795544510707875338 Size (bytes): 162784 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-14 23:05:37(UTC+1) 
4207fa93345_files_full.zip/private/v "EM AE 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-14 23:05:37 (UTC*1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-14 23:05:37(UTC+1) 
map file manager 3 SCContent ca | Source file 373fd2e35eced361b8ff2ca4a54ab 
10dí2d-08df-4a1c-b8fe- = 4207fa93345 files full.zip/private/v 
96f409f9b03d/1179554451070787 SÉ poet 
> 0DB1B276E89C/Documents/com.s 
MD5: 372cf885fd71ea7ec4dee2ba909c8f nap.file manager. 3 SCContent ca 
ed 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1179554451070787 
5338 : 0x0 (Size: 162784 bytes) 
Meta Data: 
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Pixel resolution: 


Resolution: 


Orientation: 


1125x2001 
72x72 (Unit: Inch) 


Horizontal (normal) 


Name: 16579692221021488153 Size (bytes): 267402 HEM) I E 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-14 23:05:37(UTC+1) 
4207fa93345_files_full.zip/private/v FE “OE: 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-14 23:05:37 (UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-14 23:05:37(UTC+1) 
er EN ENE Gouna di 373fd2e35eced361b8ff2ca4a54ab 
nap.file manager. 3 SCContent ca 42071293345 files full.zip/private/ 
Ee ar mob lle/Coltaineta/Oa ea Applica 
Se 657969222102148 0n/77919778-DC8B-4FED-9F7E. 
0DB1B276E89C/Documents/com.s 
MD5: 3b36205292f856f624c023ea14200 nap.file manager 3 SCContent ca 
601 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1657969222102148 
8153 : 0x0 (Size: 267402 bytes) 
Meta Data: 
Pixel resolution: 1148x2122 
Orientation: Horizontal (normal) 
10 | Name: IMG_0017.PNG Size (bytes): 9514741 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-15 13:00:03(UTC+1) 
4207fa93345_files_full.zip/private/v T on. 
ar/mobile/Media/DCIM/100APPLE/1 | Modified: 2021-02-15 13:00:03(UTC+1) 
MG_0017.PNG Accessed: 2021-02-15 13:00:03(UTC+1) 
MD5: 16b002ab42ae2246bd7ec7247417 | Source file 373fd2e35eced361b8ff2ca4a54ab 
a3ad 4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG. 0017.PNG : 0x0 (Size: 
9514741 bytes) 
11 Name: 13207951742177297301 Size (bytes): 138899 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-15 20:40:31(UTC+1) 
4207fa93345_files_full.zip/private/v ane An: 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-15 20:40:31(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-15 20:40:59(UTC+1) 
ODB IB 765880 Dame NS | source Mo 373fd2e35eced361b8ff2ca4a54ab 
nap.file manager 3 SCContent ca 42071293345 files full. zip/private/ 
(Nata ganan 1G bale. Ter 
SEET 320795174217729 0n/77919778-DC8B-AFED-9F7E- 
0DB1B276E89C/Documents/com.s 
MD5: 4e40a4fe7efa5eae8f9190f2484b7a nap.file_manager_3_SCContent_ca 
07 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1320795174217729 
7301 : 0x0 (Size: 138899 bytes) 
12 | Name: IMG_0019.JPG Size (bytes): 128837 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-16 00:35:20(UTC+1) 
42071293345 files full.zip/private/v e " DE 
ar/mobile/Media/DCIM/100APPLE/1 | Modified: 2021-02-16 00:35:20(UTC#1) 
MG_0019.JPG Accessed: 2021-02-16 00:35:20(UTC+1) 
MD5: 1954bbe29dcaba57dc689c7f5b96f | Source file 373fd2e35eced361b8ff2ca4a54ab 
2b6 4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG. 0019.JPG : 0x0 (Size: 128837 
bytes) 
Meta Data: 
Pixel resolution: 1122x684 
Resolution: 72x72 (Unit: Inch) 
Orientation: Horizontal (normal) 
13 | Name: IMG. 0020.JPG Size (bytes): 311749 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-16 00:52:55(UTC+1) 
4207fa93345 files full.zip/private/v ere LE, 
ar/mobile/Media/DCIM/100APPLE/| | Modified: 20010216 00:52 5S UTE 1) 
MG_0020.JPG Accessed: 2021-02-16 00:52:55(UTC+1) 
MD5: fb24764beb95a0c91a9abee12aa8 | Source file 373fd2e35eced361b8ff2ca4a54ab 
5101 4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG 0020.JPG : 0x0 (Size: 311749 
bytes) 
Meta Data: 


ga 2.1 Bilder - rapport, 2023-11-01 14:47 diarienr: 5000-K189802-21 


Bil 
ad ila 


Name: IMG_0021.JPG Size (bytes): 526683 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-16 00:52:58(UTC+1) 
4207fa93345_files_full.zip/private/v NET «ED. 
ar/mobile/Media/DCIM/100APPLE/I | Modified: 2021-02-16 00:52:58(UTC+1) 
MG 0021.JPG Accessed: 2021-02-16 00:52:58(UTC+1) 
MD5: 9695c0dbb9a817d00eb3eb92810f | Source file 373fd2e35eced361b8ff2ca4a54ab 
db5e 4207fa93345 files full.zip/private/v 
ar/mobile/Media/DCIM/100APPLEI/I 
MG_0021.JPG : 0x0 (Size: 526683 
bytes) 
Meta Data: 
Pixel resolution: 1500x2130 
Resolution: 72x72 (Unit: Inch) 
Orientation: Horizontal (normal) 
15 | Name: 12629390530199233979 Size (bytes): 68644 j 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-16 11:25:27(UTC+1) i 
4207fa93345_files_full.zip/private/v EE ER x , 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-16 11:25:27(UTC+1) itii d 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-16 11:25:28(UTC+1) Lees 
ad en Source file 373fd2e35eced361b8ff2ca4a54ab 
10df2d-08df-4a1c-b8fe- = 4207fa93345_files_full.zip/private/v 
96f409f9b03d/1262939053019923 Use pie cele 
SENE, 0DB1B276E89C/Documents/com.s 
MD5: 0d797570530b334aafe3e9533f220 nap.file_manager_3_SCContent_ca 
056 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1262939053019923 
3979 : 0x0 (Size: 68644 bytes) 
16 Name: 17908780385119457552 Size (bytes): 530800 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-16 11:55:46(UTC+1) 
4207fa93345_files_full.zip/private/v GEN “RE. 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-16 11:55:46(UTC+1) 
on/77919778-DC8B-4FED-9F7E- | Accessed: 2021-02-16 12:20:39(UTC+1) 
Re fle manager a SCCOntent na | Source ile 373fd2e35eced361b8ff2ca4a54ab 
10df2 d-08df-4a10-båfe- m 42071293345 files full.zip/private/v 
96140919b03d/1790878038511945 SE 
1992 0DB1B276E89C/Documents/com.s 
MD5: 03173198317db964ad168632b515 nap.file manager 3 SCContent ca 
f66f 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1790878038511945 
7552 : 0x0 (Size: 530800 bytes) 
17 | Name: 8907130734642812886 Size (bytes): 853110 e 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-16 11:56:09(UTC+1) 
4207fa93345_files_full.zip/private/v Pre 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-16 11:56:09(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-16 12:20:39(UTC+1) 
agora Oca ce | Source file 373fd2e35eced361b8ff2ca4a54ab 
10df2d-08df-4a1c-b8fe- E 42071293345 files full.zip/private/v | = 
96f409f9b03d/8907 130734642812 QUOD a 
eee 0DB1B276E89C/Documents/com.s 
MD5: 61350a38515574aa2afd024f84549 nap.file_manager_3_SCContent_ca 
560 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/8907 130734642812 
886 : 0x0 (Size: 853110 bytes) 
18 | Name: 16208314349508744697 Size (bytes): 593428 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-16 12:32:20(UTC+1) 
4207fa93345_files_full.zip/private/v TES .29- 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-16 12:32:20(UTC+1) D 
on/77919778-DC8B-4FED-9F 7E- Accessed: 2021-02-16 12:32:20(UTC+1) 
peta ee Source file 373fd2e35eced361b8ff2ca4a54ab 
10df2d-08df-4a1c-b8fe- = 4207fa93345_files_full.zip/private/v 
96f409f9b03d/162083 1434950874 SE e e 
SOIN 0DB1B276E89C/Documents/com.s 
MDS: 5cef08baa97b44b29d61c220fc1c2 nap.file manager. 3 SCContent ca 
0d6 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1620831434950874 
4697 : 0x0 (Size: 593428 bytes) 
19 | Name: 8429890263572607416 Size (bytes): 701464 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-16 16:27:39(UTC+1) | 
4207fa93345 files full.zip/private/v far: 97. 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-16 16:27:39(UTC+1) E) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-16 16:27:39(UTC+1) 
en ee Source file 373fd2e35eced361b8ff2ca4a54ab Ava 
10df2d-08df-4a1c-b8fe- = 42071293345 files full.zip/private/v à 
96/40919b03d/8429890263572607 SE 
le 0DB1B276E89C/Documents/com.s 
MD5: 831c798ca973145201772e29e7c03 nap.file manager 3 SCContent ca 
6ae 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/8429890263572607 
416 : 0x0 (Size: 701464 bytes) 


ga 2.1 Bilder - rapport, 2023-11-01 14:47 diarienr: 5000-K189802-21 


Bil 
Im ila 


21 


22 


23 


24 


25 


Name: 
Path: 


MD5: 


Name: 
Path: 


MD5: 


Name: 
Path: 


MD5: 


Name: 


Path: 


MD5: 


Name: 
Path: 


MD5: 


Name: 
Path: 


MD5: 


11633260174429347193 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F 7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1163326017442934 
7193 


308eea78807507c32345c8afaadf5 
34f 


11319015233496082657 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1131901523349608 
2657 


cfb3542ceb64f05d916061e528aae 
42e 


3447301231455106300 


373fd2e35eced361b8ff2ca4a54ab 
42071293345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F 7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/3447301231455106 
300 


5d811d3a7113f9758d3ff010dc8ca 
1fd 


ef72e724617d92778389d4b93f61a 
80e 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/FCFD6C9B-663A-4C5F-85E7- 
6A732F3529ED/Library/Caches/co 
m.onevcat.Kingfisher.ImageCache. 
default/ef72e7a4617d92778389d4 
b93f61a80e 


ed820887684efb4f8af7f82da37a26 
85 


IMG 0033.PNG 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345 files full.zip/private/v 
ar/mobile/Media/DCIM/100APPLEI/I 
MG_0033.PNG 


8d478694c38f74f2101804af874efe 
5f 


IMG 0034.PNG 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG_0034.PNG 


98e7bb854aa1df5ebe5ce2b02d65f 
53d 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Meta Data: 
Pixel resolution: 


Orientation: 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


99321 
2021-02-16 17:01:56(UTC+1) 
2021-02-16 17:01:56(UTC+1) 
2021-02-16 17:01:56(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
42071293345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1163326017442934 
7193 : 0x0 (Size: 99321 bytes) 


343552 

2021-02-16 20:17:32(UTC+1) 
2021-02-16 20:17:32(UTC 1) 
2021-02-16 20:17:35(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1 131901523349608 
2657 : 0x0 (Size: 343552 bytes) 


241904 

2021-02-16 23:33:58(UTC+1) 
2021-02-16 23:33:58(UTC+1) 
2021-02-17 11:36:17(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/3447301231455106 
300 : 0x0 (Size: 241904 bytes) 


16179 
2021-02-17 12:29:43(UTC+1) 
1990-01-27 11:50:44(UTC+1) 
1990-01-27 11:50:44(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/FCFD6C9B-663A-4C5F-85E7- 
6A732F3529ED/Library/Caches/co 
m.onevcat.Kingfisher.ImageCache. 
default/ef72e7a4617d92778389d4 
b93f61a80e ` 0x0 (Size: 16179 
bytes) 


120x120 
Horizontal (normal) 


9733087 
2021-02-18 00:59:46(UTC+1) 
2021-02-18 00:59:46(UTC+1) 
2021-02-18 00:59:46(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345 files full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG 0033.PNG : 0x0 (Size: 
9733087 bytes) 


727561 

2021-02-18 16:34:11(UTC+1) 
2021-02-18 16:34:11(UTC+1) 
2021-02-18 16:34:11(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG 0034.PNG : 0x0 (Size: 727561 
bytes) 


aga 2.1 Bilder - rapport, 2023-11-01 14:47 diarienr: 5000-K189802-21 


Bil 
26 


2 


28 


29 


30 


Name: 


Path: 


MDS: 


Name: 


Path: 


MDS: 


Name: 


Path: 


MDS: 


Name: 


Path: 


MDS: 


Name: 


Path: 


MDS: 


7887027209670906882 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F 7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/7887027209670906 
882 


1d433216fb1f9705e6de29829b860 
3f3 


2240435645623405002 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/2240435645623405 
002 


4272ba29ef6e6c0a6f5a28c8d4140 
5fe 


8662731473076195366 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/8662731473076195 
366 


de16c81fc04aa2af4f3dbf08ee440a 
b6 


IMG 0040.JPG 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLEI/I 
MG_0040.JPG 


2cfe46a1a93917e436a483acaefd2 
dc2 


IMG_0041.JPG 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG 0041.JPG 


fd59c0b02107857ecf54b85656655 
f59 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Meta Data: 
Pixel resolution: 


Resolution: 
Orientation: 
Size (bytes): 
Created: 
Modified: 


Accessed: 
Source file 


Meta Data: 
Camera Make: 


Camera Model: 
Capture Time: 
Pixel resolution: 
Resolution: 


Orientation: 


593011 

2021-02-19 23:48:22(UTC+1) 
2021-02-19 23:48:22(UTC+1) 
2021-02-19 23:48:22(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
42071293345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/7887027209670906 
882 : 0x0 (Size: 593011 bytes) 


191633 

2021-02-20 02:52:33(UTC+1) 
2021-02-20 02:52:33(UTC+1) 
2021-02-20 02:52:34(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/2240435645623405 
002 : 0x0 (Size: 191633 bytes) 
767687 

2021-02-20 18:13:29(UTC+1) 
2021-02-20 18:13:29(UTC+1) 
2021-02-20 18:13:29(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1 c-b8fe- 
96f409f9b03d/8662731473076195 
366 : 0x0 (Size: 767687 bytes) 
153885 

2021-02-20 22:58:39(UTC+1) 
2021-02-20 22:58:39(UTC+1) 
2021-02-20 22:58:39(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG. 0040.JPG : 0x0 (Size: 153885 


bytes) 

750x1334 

72x72 (Unit: Inch) 
Horizontal (normal) 


1138729 
2021-02-21 03:16:02(UTC+1) 
2021-02-21 03:16:02(UTC+1) 
2021-02-21 03:16:02(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
42071293345 files full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG 0041.JPG : 0x0 (Size: 
1138729 bytes) 


Apple 

iPhone X 
2021-02-21 03:16:02 
3840x2160 

72x72 (Unit: Inch) 


Rotate 90 CW 


— | Bilaga 2.1 Bilder - rapport, 2023-11-01 14:47 diarienr: 5000-K189802-21 
31 | Name: 13570990630074263692 Size (bytes): 


Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 
4207fa93345_files_full.zip/private/v Modified: 
ar/mobile/Containers/Data/Applicati ive e 
on/77919778-DC8B-4FED-9F7E- Accessed: 
0DB1B276E89C/Documents/com.s 


nap.file manager 3 SCContent ca | Source file 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1357099063007426 
3692 
MD5: 479ef481534fb1c54b7b32e5ef98e 
559 
Meta Data: 
Pixel resolution: 
Orientation: 
32 | Name: IMG_0052.PNG Size (bytes): 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 


4207fa93345_files_full.zip/private/v ado 
ar/mobile/Media/DCIM/100APPLE/1 | Modified: 


197463 

2021-02-21 17:47:20(UTC+1) 
2021-02-21 17:47:20(UTC+1) 
2021-02-21 17:47:20(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1357099063007426 
3692 : 0x0 (Size: 197463 bytes) 


1134x2108 
Horizontal (normal) 


963327 
2021-02-23 03:16:27(UTC+1) 
2021-02-23 03:16:27(UTC+1) 


258 
mug 


ag E 
F E 
$ 3 


4207fa93345_files_full.zip/private/v Modified: 
ar/mobile/Containers/Data/Applicati Dome 
on/77919778-DC8B-4FED-9F7E- Accessed: 
0DB1B276E89C/Documents/com.s S fil 
nap.file manager 3 SCContent ca | Source file 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1820440973330557 
9013 


MD5: e2474d3d2e21255ec787e3ea81ba 
aa0c 


34 | Name: 511E647B-C8B0-4D1E-AF70- Size (bytes): 
83CB2FETAFE Redi 


Path: 373fd2e35eced361b8ff2ca4a54ab Modified: 
42071293345 files full.zip/private/v | Nolet: 
ar/mobile/Containers/Data/PluginKi | Accessed: 
tPlugin/D709FF81-CAA0-4E6F- 
AB75- Source file 
7465BF246B7A/Library/Caches/co 
m.burbn.instagram.notificationexte 
nsion/fsCachedData/51 1E647B- 
C8B0-4D1E-AF70- 


2021-02-23 03:35:02(UTC+1) 
2021-02-23 03:35:02(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1820440973330557 
9013 : 0x0 (Size: 185380 bytes) 


262833 
2021-02-23 11:54:57(UTC+1) 
2021-02-23 11:54:57(UTC+1) 
2021-02-23 11:54:57(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/PluginKi 
tPlugin/D709FF81-CAA0-4E6F- 
AB75- 
7465BF246B7A/Library/Caches/co 


MG. 0052.PNG Accessed: 2021-02-23 03:16:27(UTC+1) 
MD5: de45d5df04bfc7c4bb3e050c9ee7c | Source file 373fd2e35eced361b8ff2ca4a54ab 
807 4207fa93345_files_full.zip/private/v | === 
ar/mobile/Media/DCIM/100APPLE/I 
MG 0052.PNG : 0x0 (Size: 963327 
bytes) 
33 | Name: 18204409733305579013 Size (bytes): 185380 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-23 03:35:02(UTC+1) 


4207fa93345_files_full.zip/private/v Modified: 
ar/mobile/Containers/Data/Applicati S 
on/77919778-DC8B-4FED-9F7E- Accessed: 
0DB1B276E89C/Documents/com.s 


C83CB2FE1AFE å Aber 
m.burbn.instagram.notificationexte 
MD5: 30c8cbcc68852f7fcf 720009853939 nsion/fsCachedData/511E647B- 
5d C8B0-4D1E-AF70- 
C83CB2FE1AFE : 0x0 (Size: 
262833 bytes) 
35 | Name: 8068488195769457211 Size (bytes): 233692 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-23 13:14:56(UTC+1) 


2021-02-23 13:14:56(UTC+1) 
2021-02-23 13:14:59(UTC+1) 


ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- Accessed: 
0DB1B276E89C/Documents/com.s S fi 
nap.file manager 3. SCContent ca | Source file 
10df2d-08df-4a1 c-b8fe- 
96f409f9b03d/3270432188731252 
207 


MD5: 668958281def329bba6e0b6da649f 
aa2 


i Source file 373fd2e35eced361b8ff2ca4a54ab 
nap Me three caer aces ca 4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
Sor OD HORE BEN 95769457 0n/77919778-DC8B-4FED-9F7E. 
0DB1B276E89C/Documents/com.s 
MD5: a65d684de99853914b15d95a79e3 nap.file_manager_3_SCContent_ca 
606b 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/8068488195769457 
211 : 0x0 (Size: 233692 bytes) 
36 | Name: 3270432188731252207 Size (bytes): 125727 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-23 13:20:23(UTC+1) 
4207fa93345_files_full.zip/private/v Modified: 2021-02-23 13:20:23(UTC+1) 


2021-02-23 13:20:27(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/3270432188731252 
207 : 0x0 (Size: 125727 bytes) 


NUNG 
in 
ma $ 
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37 | Name: 13214038314788928889 Size (bytes): 97412 HEMLIG 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-23 19:08:51(UTC+1) | 
4207fa93345 files full.zip/private/v En .na- d al 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-25 19:08:51 (UTC+1) Ke 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-23 19:08:52(UTC+1) n 
o EDS | Gouna tle 373fd2e35eced361b8ff2ca4a54ab 
nap.file manager. 3 SCContent ca å Å a 
10df2d-08df-4a1c-b8fe- 4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
96f409f9b03d/1 321403831478892 arena Do 
0DB1B276E89C/Documents/com.s 
MD5: ed9e5950235c40b1cd6fd1 1ffbe30 nap.file manager 3 SCContent ca 
574 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1321403831478892 
8889 : 0x0 (Size: 97412 bytes) 
38 | Name: IMG_0060.JPG Size (bytes): 193778 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-23 20:53:51(UTC+1) 
4207fa93345_files_full.zip/private/v far: Ea: 
ar/mobile/Media/DCIM/100APPLE/1 | Modified: 2021-02:23-20:53:51(UTE+1) 
MG_0060.JPG Accessed: 2021-02-23 20:53:51(UTC+1) 
MD5: 074b585fb27 1fa2105f2c46949896 | Source file 373fd2e35eced361b8ff2ca4a54ab 
7cc 4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG_0060.JPG : 0x0 (Size: 193778 
bytes) 
Meta Data: 
Pixel resolution: 1242x2688 
Resolution: 72x72 (Unit: Inch) 
Orientation: Horizontal (normal) 
39 | Name: IMG 0061.JPG Size (bytes): 194045 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-23 20:53:51(UTC+1) 
42071293345 files full.zip/private/v PN Ea. 
ar/mobile/Media/DCIM/100APPLE/I | Modified: NE 
MG 0061.JPG Accessed: 2021-02-23 20:53:51(UTC+1) 
MD5: d40b3ec9324ce90f99ef253181645 | Source file 373fd2e35eced361b8ff2ca4a54ab 
5f6 4207fa93345 files full.zip/private/v 
ar/mobile/Media/DCIM/100APPLEI/I 
MG_0061.JPG : 0x0 (Size: 194045 
bytes) 
Meta Data: 
Pixel resolution: 1242x2688 
Resolution: 72x72 (Unit: Inch) 
Orientation: Horizontal (normal) 
^0 | Name: IMG 0059.JPG Size (bytes): 193590 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-23 20:53:51(UTC+1) 
42071293345 files full.zip/private/v Far: Ea. 
ar/mobile/Media/DCIM/100APPLE/I | Modified: 2021-0229 20321 TEN) 
MG_0059.JPG Acoessed: 2021-02-23 20:53:51(UTC+1) 
MDS: 1989ec2fa17931e53eac9692a1f89 | Source file 373fd2e35eced361b8ff2ca4a54ab 
146 4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG. 0059.JPG : 0x0 (Size: 193590 
bytes) 
Meta Data: 
Pixel resolution: 1242x2688 
Resolution: 72x72 (Unit: Inch) 
Orientation: Horizontal (normal) 
^1 | Name: IMG 0058.JPG Size (bytes): 193193 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-23 20:53:51(UTC+1) 
4207fa93345_files_full.zip/private/v VE "ES 
ar/mobile/Media/DCIM/100APPLE/| | Modified: Se) 
MG_0058.JPG Accessed: 2021-02-23 20:53:51(UTC+1) 
MD5: 06f2dddd3d3334825ea430de6625 | Source file 373fd2e35eced361b8ff2ca4a54ab 
e8f7 4207fa93345 files full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG. 0058.JPG : 0x0 (Size: 193193 
bytes) 
Meta Data: 
Pixel resolution: 1242x2688 
Resolution: 72x72 (Unit: Inch) 
Orientation: Horizontal (normal) 
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42 | Name: 15898981641500938172 Size (bytes): 824399 N HEMLI G 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-24 01:17:14(UTC+1) b 
4207fa93345 files full.zip/private/v are P Fo Pan, 
ar/mobile/Containers/Data/Applicati | Modified: ee ee Oe db. re 
on/77919778-DC8B-4FED-9F 7E- Accessed: 2021-02-24 01:17:22(UTC+1) kang 
nap manager 3 SCContent ca | Source file 373fd2e35eced361b8ff2ca4a54ab | m ` 
10df2 d-08df-4a10-båfe- E 42071293345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
Fn 589898164150093 0n/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
MD5: 068dda2b88243336a5b6b5633899 nap.file_manager_3_SCContent_ca 
b259 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1589898164150093 
8172 : 0x0 (Size: 824399 bytes) 
43 | Name: 3962768266994007994 Size (bytes): 735161 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-24 01:17:14(UTC+1) 
4207fa93345_files_full.zip/private/v far» BEI 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-24 01:17:14(UTC+1) 
on/77919778-DC8B-4FED-9F 7E- Accessed: 2021-02-24 01:17:14(UTC+1) 
ODE EE Pave nel colts || Source e 373fd2e35eced36 1b8ff2ca4a54ab 
nap.file manager 3 SCContent ca å paris 
i = i 4207fa93345 files full.zip/private/v 
ME O ar/mobile/Containers/Data/Applicati 
me bee beng 0n/77919778-DC8B-4FED-9F7E. 
0DB1B276E89C/Documents/com.s 
MD5: 485d08e8bd8be3c3747353ee4b83 nap.file manager 3 SCContent ca 
238d 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/3962768266994007 
994 : 0x0 (Size: 735161 bytes) 
44 | Name: IMG_0074.JPG Size (bytes): 306481 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-24 01:49:41(UTC+1) 
4207fa93345_files_full.zip/private/v TM NES 
ar/mobile/Media/DCIM/100APPLE/I | Modified: 2021-02-24 01:49:41(UTC+1) 
MG_0074.JPG Accessed: 2021-02-24 01:49:41(UTC+1) 
MDS: e6b867ec4e08d4d46e4bc48e9826 | Source file 373fd2e35eced361b8ff2ca4a54ab 
Beaf 42071293345 files full.zip/private/v 
ar/mobile/Media/DCIM/100APPLEI/I 
MG_0074.JPG : 0x0 (Size: 306481 
bytes) 
Meta Data: 
Pixel resolution: 1242x2688 
Resolution: 72x72 (Unit: Inch) 
Orientation: Horizontal (normal) 
45 | Name: IMG. 0075.JPG Size (bytes): 385614 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-24 01:49:41 (UTC+1) 
4207fa93345_files_full.zip/private/v Br ur 
ar/mobile/Media/DCIM/100APPLE/I | Modified: 20210224 00 ne) 
MG_0075.JPG Accessed: 2021-02-24 01:49:41(UTC+1) 
MD5: d81ccc59d6d96125ffc79e1de43a7 | Source file 373fd2e35eced361 b8ff2ca4a54ab 
3b4 4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG. 0075.JPG : 0x0 (Size: 385614 
bytes) 
Meta Data: 
Pixel resolution: 1242x2688 
Resolution: 72x72 (Unit: Inch) 
Orientation: Horizontal (normal) 
46 | Name: IMG. 0072.JPG Size (bytes): 297333 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-24 01:49:41(UTC+1) 
4207fa93345_files_full.zip/private/v P Aa: 
ar/mobile/Media/DCIM/100APPLE/| | Modified: ke UTEN) 
MG 0072.JPG Accessed: 2021-02-24 01:49:41(UTC+1) 
MD5: 0f416cd4e8d6205fc906d5d8f3032 | Source file 373fd2e35eced361b8ff2ca4a54ab 
25a 4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG 0072.JPG : 0x0 (Size: 297333 
bytes) 
Meta Data: 
Pixel resolution: 1242x2688 
Resolution: 72x72 (Unit: Inch) 
Orientation: Horizontal (normal) 
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Bil 
rg ila 


48 


49 


50 


51 


52 


Name: 


Path: 


MD5: 


Name: 


Path: 


MD5: 


Name: 


Path: 


MD5: 


Name: 


Path: 


MD5: 


Name: 


Path: 


MD5: 


Name: 


Path: 


MD5: 


IMG 0073.JPG 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG 0073.JPG 


614a3de48950dc016bb57f3695ff8 
380 


IMG 0071.JPG 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG 0071.JPG 


778221 38baf26d53f80753b5a5b63 
e69 


IMG_0078.JPG 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG 0078.JPG 


48e02462d0b55d70fa0c464ec568 
7aa8 


2e8820cb4942f18a7fbd42686a97f 
9d2 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/7 DCF 1696-B768-4516-96A4- 
16CD467E46E1/Library/Caches/co 
m.burbn.instagram.IGImageCache/ 
ao 8a7fbd42686a97f 


1ea84af270e79a304632a2e51970 
0399 


acd23b59f0c12a7a0405083951d5 
5163 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/7DCF1696-B768-4516-96A4- 
16CD467E46E1/Library/Caches/co 
m.burbn.instagram.IGImageCache/ 
acd23b59f0c12a7a0405083951d5 
5163 


c22a6a4c7f76c131a2a2221c2899a 
ce7 


b1f96dfd2e61b0542d606233a48ae 
57c 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/7DCF1696-B768-4516-96A4- 
16CD467E46E1/Library/Caches/co 
m.burbn.instagram.IGImageCache/ 
b1f96dfd2e61b0542d606233a48ae 
57c 


dd3a156c5f4be33bc4b16a8b2a83c 
c25 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Meta Data: 


Pixel resolution: 


Resolution: 


Orientation: 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Meta Data: 


Pixel resolution: 


Resolution: 


Orientation: 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Meta Data: 


Pixel resolution: 


Resolution: 


Orientation: 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


366931 

2021-02-24 01:49:41(UTC+1) 
2021-02-24 01:49:41(UTC+1) 
2021-02-24 01:49:41(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 

42071293345 files full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG 0073.JPG : 0x0 (Size: 366931 
bytes) 


1242x2688 
72x72 (Unit: Inch) 
Horizontal (normal) 


345344 
2021-02-24 01:49:41(UTC+1) 
2021-02-24 01:49:41(UTC+1) 
2021-02-24 01:49:41(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG 0071.JPG : 0x0 (Size: 345344 
bytes) 


1242x2688 
72x72 (Unit: Inch) 
Horizontal (normal) 


213203 

2021-02-24 01:49:42(UTC+1) 
2021-02-24 01:49:42(UTC+1) 
2021-02-24 01:49:42(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG_0078.JPG : 0x0 (Size: 213203 
bytes) 


1242x2688 
72x72 (Unit: Inch) 
Horizontal (normal) 


21632 

2021-02-24 02:39:57(UTC+1) 
2021-02-25 05:59:24(UTC+1) 
2021-02-25 05:59:24(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/7DCF1696-B768-4516-96A4- 
16CD467E46E 1/Library/Caches/co 
m.burbn.instagram.IGImageCache/ 
2e8820cb4942f18a7fbd42686a97f 
9d2 : 0x0 (Size: 21632 bytes) 


30547 

2021-02-24 02:39:57(UTC+1) 
2021-02-25 05:59:24(UTC+1) 
2021-02-25 05:59:24(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/7DCF1696-B768-4516-96A4- 
16CD467E46E1/Library/Caches/co 
m.burbn.instagram.IGImageCache/ 
acd23b59f0c12a7a0405083951d5 
5163 : 0x0 (Size: 30547 bytes) 


49481 

2021-02-24 02:39:57(UTC+1) 
2021-02-25 05:59:24(UTC+1) 
2021-02-25 05:59:24(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/7DCF1696-B768-4516-96A4- 
16CD467E46E 1/Library/Caches/co 
m.burbn.instagram.IGImageCache/ 
b1f96dfd2e61b0542d606233a48ae 
57c : 0x0 (Size: 49481 bytes) 
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54 


55 


56 


57 


58 


Name: 
Path: 


MDS: 


Name: 
Path: 


MDS: 


Name: 
Path: 


MDS: 


Name: 


Path: 


MD5: 


Name: 
Path: 


MD5: 


Name: 
Path: 


MD5: 


4219173130104079633 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/4219173130104079 
633 


0e4f3e37ebb35c5b8be4fff440ee7b 
52 


8169749086886742911 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/8169749086886742 
911 


14536a82b9a5f7 ae408 14df68ae49 
dda 


4111602745795513221 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/4111602745795513 
221 


33dde9334e44358bd40c414de578 
3770 


IMG 0090.PNG 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE!I 
MG 0090.PNG 


484ca37dbf7c23ca4a69512900e09 
ebb 


3463577787441088740 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/3463577787441088 
740 


11205751df4849954193325b5b6c7 
d0e 


10465663208146181786 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1046566320814618 
1786 


3bfc2b6741e6d3dfc333f0cdfd5a66 
87 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Meta Data: 
Pixel resolution: 


Orientation: 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Attachments: 


Attachment source: 


Source file 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


921802 
2021-02-24 13:57:34(UTC+1) 
2021-02-24 13:57:34(UTC+1) 
2021-02-24 13:57:34(UTC 1) 


373fd2e35eced361b8ff2ca4a54ab 
42071293345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/4219173130104079 
633 : 0x0 (Size: 921802 bytes) 


768622 

2021-02-24 13:57:34(UTC+1) 
2021-02-24 13:57:34(UTC+1) 
2021-02-24 13:57:34(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/8169749086886742 
911 : 0x0 (Size: 768622 bytes) 


203227 

2021-02-24 15:22:59(UTC+1) 
2021-02-24 15:22:59(UTC+1) 
2021-02-24 15:24:51(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1 c-b8fe- 
96f409f9b03d/4111602745795513 
221 : 0x0 (Size: 203227 bytes) 


828x1792 
Horizontal (normal) 


3017731 

2021-02-24 18:40:24(UTC+1) 
2021-02-24 18:40:24(UTC+1) 
2021-02-24 18:40:24(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLEI/I 
MG_0090.PNG : 0x0 (Size: 
3017731 bytes) 


113367 

2021-02-24 19:16:20(UTC+1) 
2021-02-24 19:16:20(UTC+1) 
2021-02-24 23:40:17(UTC+1) 
1 

Snapchat (1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F 7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/3463577787441088 
740 : 0x0 (Size: 113367 bytes) 


440609 

2021-02-24 19:16:46(UTC+1) 
2021-02-24 19:16:46(UTC+1) 
2021-02-24 19:16:47(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1046566320814618 
1786 : 0x0 (Size: 440609 bytes) 
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59 Name: 8074097464000707434 Size (bytes): 514706 HEMI I G 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-24 19:27:44(UTC+1) 
4207fa93345_files_full.zip/private/v IEEE ER? 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-24 19:27:44UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-24 19:27:44(UTC+1) 
A et 373fd2e35eced361b8ff2ca4a54ab 
nap.file_manager_3_SCContent_ca 42 7 naia 
pga den ess one 
ar 
TA 0n/77919778-DC8B-4FED-9F7E. 
0DB1B276E89C/Documents/com.s 
MD5: aede399492f2a6774f978e527dAcf nap.file_manager_3_SCContent_ca 
485 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/8074097464000707 
434 : 0x0 (Size: 514706 bytes) 
90 | Name: 9737664344280437203 Size (bytes): 619305 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-24 20:24:51(UTC+1) 
42071293345 files full.zip/private/v far: ER 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-24 20:24:51(UTC+1) 
on/77919778-DC8B-4FED-9F 7E- Accessed: 2021-02-24 20:24:57(UTC+1) 
OBE Tee FEE 89C Documents NS | Soues la 373fd2e35eced36 1b8ff2ca4a54ab 
nap.file manager 3 SCContent ca i ipn 
10df2d-08df-4a1c-b8fe- Be A et EN 
ar/mobile/Containers/Data/Applicati 
nd 0n/77919778-DC8B-AFED-9F7E- 
0DB1B276E89C/Documents/com.s 
MD5: f63b72aee3b3177ea1895e25a707 nap.file manager 3 SCContent ca 
a8a4 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/9737664344280437 
203 : 0x0 (Size: 619305 bytes) 
61 Name: 2013427898313326939 Size (bytes): 540289 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-24 20:24:51(UTC+1) 
4207fa93345_files_full.zip/private/v Pope JA: 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-24 20:24:51(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-24 20:24:51(UTC+1) 
e SANGA Source fle 373fd2e35eced361b8ff2ca4a54ab 
nap.file manager 3 SCContent ca å Å 1 
10df2d-08df-4a'c-b8fe- SEN e n i ee [PA 
ar/mobile/Containers/Data/Applicati 
FE 3427898313326 0n/77919778-DC8B-4FED-9F7E. 
0DB1B276E89C/Documents/com.s 
MD5: e6f4f1608a261ea97b38f576a4092 nap.file_manager_3_SCContent_ca 
439 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/2013427898313326 
939 : 0x0 (Size: 540289 bytes) 
62 | Name: 8194780852731202879 Size (bytes): 837263 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-24 20:24:51(UTC+1) 
4207fa93345 files full.zip/private/v STEE P 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-24 20:24:51(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-24 20:24:51(UTC+1) 
ODB 1B276F89C/Documents/com.S | Source file 373fd2e35eced361b8ff2ca4a54ab 
nap.file_manager_3_SCContent_ca : hold 
10df2d-08df-4a1c-b8fe- 4207fa93345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
26f409f9b03d/81 94780852731202 NENNE 
0DB1B276E89C/Documents/com.s 
MD5: 1b0009c504fd23a144b9c1e0f7820 nap.file manager 3 SCContent ca 
488 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/8194780852731202 
879 : 0x0 (Size: 837263 bytes) 
63 | MDS: 9f551f31faaea7d45340adf8492b4c | Size (bytes): 6976 
7b 
Duplicates(1) 
63(1) Name: 8606735fbf4145c125d5c680ebbcb | Created: 2021-02-24 23:11:17(UTC+1) 
Path Bes Modified: 2021-02-25 00:02:53(UTC+1) 
ath: 373fd2e35eced361b8ff2ca4a54ab , pra 
42071293345 files full.zip/private/v | Accessed: 2021-02-25 00:02-Sa(UTC#1) 
ar/mobile/Containers/Data/Applicati | Source file 373fd2e35eced361 b8ff2ca4a54ab 
on/7DCF1696-B768-4516-96A4- 4207fa93345 files full.zip/private/v 
16CD467E46E 1/Library/Caches/co ar/mobile/Containers/Data/Applicati 
m.burbn.instagram.IGlmageCache/ on/7DCF 1696-B768-4516-96A4- 
8606735fbf4145c125d5c680ebbcb 16CD467E46E1/Library/Caches/co 
ae9 m.burbn.instagram.IGImageCache/ 
8606735fbf4145c125d5c680ebbcb 
ae9 : 0x0 (Size: 6976 bytes) 
63(2) Name: 1042014436ddfea20ade027f1afeef | Created: 2021-02-24 23:23:55(UTC+1) 
Bh 2r Modified: 2021-02-25 05:59:24(UTC+1) 
ath: 373fd2e35eced361b8ff2ca4a54ab S E 
42071293345 files_full.zip/private/v | Accessed: 2021-02-25 05:59:24(UTC+1) 
ar/mobile/Containers/Data/Applicati | Source file 373fd2e35eced361b8ff2ca4a54ab 
on/7DCF1 696-B768-4516-96A4- 42071293345 files full.zip/private/v 
16CD467E46E 1/Library/Caches/co ar/mobile/Containers/Data/Applicati 
m.burbn.instagram.IGImageCache/ on/7 DCF 1696-B768-4516-96A4- 
1c42c14436ddfea20ade027f1afeef 16CD467E46E 1/Library/Caches/co 
27 m.burbn.instagram.IGImageCache/ 
1c42c14436ddfea20ade027f1afeef 
27 : 0x0 (Size: 6976 bytes) 
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264 


Bil 
ad ila 


Pixel resolution: 


1125x2000 


Name: IMG_0093.JPG Size (bytes): 231460 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-24 23:31:13(UTC+1) HEM) IG 
4207fa93345 files full.zip/private/v as; ET? 
ar/mobile/Media/DCIM/100APPLE/I | Modified: 2021-02-24 23:31:13(UTC+1) 
MG 0093.JPG Accessed: 2021-02-24 23:31:13(UTC+1) 
MD5: b9c18720aa2c01824838be89f04b | Source file 373fd2e35eced361b8ff2ca4a54ab 
936c 4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG. 0093.JPG : 0x0 (Size: 231460 
bytes) 
Meta Data: 
Pixel resolution: 828x1792 
Resolution: 72x72 (Unit: Inch) 
Orientation: Horizontal (normal) 
65 | Name: IMG. 0094.PNG Size (bytes): 1214431 2: 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-25 00:02:50(UTC+1) Emo 
4207fa93345_files_full.zip/private/v Here Me — — 
ar/mobile/Media/DCIM/100APPLE/1 | Modified: 2021-02-25 00:02:50(UTC+1) = 
MG 0094.PNG Accessed: 2021-02-25 00:02:50(UTC+1) eet 
MD5: 96d5d314601321ccfdb41ae05846 | Source file 373fd2e35eced361b8ff2ca4a54ab | == === 
435f 42071293345 files full.zip/private/v | * — * 
ar/mobile/Media/DCIM/100APPLE/I 
MG. 0094.PNG : 0x0 (Size: 
1214431 bytes) 
66 Name: 9709691928586834034 Size (bytes): 99776 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-25 00:30:34(UTC+1) 
4207fa93345 files full.zip/private/v "— AA: 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-25 00:30:34(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-25 00:31:57(UTC+1) 
O | Source file 373fd2e35eced361b8ff2ca4a54ab 
Pod menago aaa 42071293345 files full.zip/private/v 
10df2d-08df-4a1c-b8fe- mobile/Containers/D t JA, Wat 
96f409f9b03d/9709691928586834 ON TOIT TR DCSE. åre Borre. l 
034 0DB1B276E89C/Documents/com.s 
MD5: b8c89f7d3c44d14fb86ec5224eb69 nap.file_manager_3_SCContent_ca 
896 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/9709691928586834 
034 : 0x0 (Size: 99776 bytes) 
Meta Data: 
Pixel resolution: 750x1334 
Orientation: Horizontal (normal) 
67 | Name: 143517050791129943 Size (bytes): 861889 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-25 03:16:10(UTC+1) 
4207fa93345_files_full.zip/private/v TUM ex 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-25 03:16:10(UTC+1) 
on/77919778-DC8B-4FED-9F7E- | Accessed: 2021-02-25 03:16:10(UTC+1) 
ENE [Source Me 373fd2e35eced361b8ff2ca4a54ab 
depo IE e eo A LIEN e 42071293345. files full.zip/private/v 
er era 1299 armobie C onanera Applicat 
43 on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
MD5: fb81887b6e0d323b078fe91d2c619 nap.file manager 3 SCContent ca 
c9f 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1435170507911299 
43 : 0x0 (Size: 861889 bytes) 
68 Name: Offfcdd806b50f54bfad867c801d3e | Size (bytes): 100796 
28 Created: 2021-02-25 04:28:25(UTC+1) 
Path: 373fd2e35eced361b8ff2ca4a54ab ind: ine: 
42071293345. files_full.zip/private/v | Modified: 2021-02-25 10:03:31(UTC+1) 
ar/mobile/Containers/Data/Applicati | Accessed: 2021-02-25 10:03:31(UTC+1) Y 
DEET 373fd2e35eced361b8ff2ca4a54ab 
16CD467E46E1/Library/Caches/co 42071293345 files full.zip/private/ 
mouron Nagmana JE naga O noble ar/mobile/Containers/Data/Applicati 
e ÓN d3e on/7DCF 1696-B768-4516-96AM- 
16CD467E46E1/Library/Caches/co 
MD5: 221222429501414765481fd70d04 m.burbn.instagram.IGlmageCache/ 
896d Offfc4d806b50f54bfad867c801d3e 
58 : 0x0 (Size: 100796 bytes) 
Meta Data: 
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Name: AF936A1E-DEOB-4BD2-871F- Size (bytes): 551615 
mA ET Created: 2021-02-25 04:56:18(UTC+1) 
Path: 373fd2e35eced361b8ff2ca4a54ab veru = 
42071293345. files full.zip/private/v | Modified: 2021-02-25 04:56:18(UTC+1) 
Eure erede le Accessed: 2021-02-25 04:56:18(UTC+1) 
on - 

; Source file 373fd2e35eced361b8ff2ca4a54ab 

E ZOAEAQ/Libråry/SplashBoa 42071293345 files full.zip/private/v 
pshots/scenelD/com.apple. S | belies 
Maps-/1/33968-E744-4A31- u Aa 
A sU a Dr 397FB120AEA0/Library/SplashBoa 
rd/Snapshots/scenelD/com.apple. 
RER AGS: Maps-71733388-E744-4A31- 
MD5: 7c415c64165794606b383e9b2b75 A1EC-C3B1B344A427/AF936A1E- 
9888 DEOB-4BD2-871F- 
F9A390CAE542(03x.ktx : 0x0 
(Size: 551615 bytes) 
70 | Name: 734a303e2bd7d3cec22df349f2d56 | Size (bytes): 121341 
SU Created: 2021-02-25 05:58:54(UTC+1) 
Path: 373fd2e35eced361b8ff2ca4a54ab PAH JEG: 
42071293345 files full.zip/privaterv | Modified: 2021-02-25 05:58:54(UTC+1) 
EN Accessed: 2021-02-25 05:58:54(UTC+1) 
on. - - - - 

i Source file 373fd2e35eced361b8ff2ca4a54ab 
16CD467E46E1/Library/Caches/co : hopin 
m.burbn.instagram.IGImageCache/ Jorinaa Sf ep er M 
734a303e2bd7d3cec22df349f2d56 On TBCE1 696 TGD: 4516. she l 
970 c a p 

16CD467E46E1/Library/Caches/co 
MD»: af25007ad28befc88e6b7787d840d m.burbn.instagram.IGlmageCache/ 
c70 734a303e2bd7d3cec22df349f2d56 
970 : 0x0 (Size: 121341 bytes) 
71 Name: 49edac31765bded52bb4e71eea7f | Size (bytes): 54700 
a 2883 Created: 2021-02-25 05:59:17(UTC+1) 
ath: 373fd2e35eced361b8ff2ca4a54ab FA AN 
42071293345. files full.zip/private/v | Modified: 2021-02-25 05:59:17(UTC+1) 
arp le om ane Cee applica Accessed: 2021-02-25 05:59:17(UTC+1) 
on - - - - 

i Source file 373fd2e35eced361b8ff2ca4a54ab 
16CD467E46E 1/Library/Caches/co 7 Zorn 
m.burbn.instagram.IGlmageCache/ la payatot 
49edac31765bded52bb4e7 1eea7f 

on/7 DCF 1696-B768-4516-96A4- 
ARE 16CD467E46E1/Library/Caches/co 
MD5: c6d7f8d02742ac6c28496453261bd m.burbn.instagram.IGImageCache/ 
54f 49edac31765bded52bb4e71eea7f 
2833 : 0x0 (Size: 54700 bytes) 
72 | Name: 2179965852489560015 Size (bytes): 94746 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-25 06:11:11(UTC+1) 
4207fa93345_files_full.zip/private/v EE P 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-25 06:11:11(UTC+1) 
on/77919778-DC8B-4FED-9F 7E- Accessed: 2021-02-25 06:11:11(UTC+1) 
Geen Pa eras Source file 373fd2e35eced361b8ff2ca4a54ab 
Han hata. = 4207fa93345_files_full.zip/private/v 
HEU CEU o PEE ar/mobile/Containers/Data/Applicati 
015 on/77919778-DC8B-4FED-9F7E- 
ODB1B276E89C/Documents/com.s 
MD5: d471cc20ddc345b27d3c06a72279 nap.file_manager_3_SCContent_ca 
7ddc 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/2179965852489560 
015 : 0x0 (Size: 94746 bytes) 
73 Name: bd8e6592046032248f3e7a6385b6 | Size (bytes): 20016 
eu Created: 2021-02-25 06:15:28(UTC+1) 
Path: 373fd2e35eced361b8ff2ca4a54ab TUM es 
42071293345, files. ful.zip/privateyv | Modified: 2021-02-25 06:15:28(UTC+1) 
SS ondas dia Se Accessed: 2021-02-25 06:15:28(UTC+1) 
on - - - - 

R Source file 373fd2e35eced361b8ff2ca4a54ab 
16CD467E46E1/Library/Caches/co 7 deiere 
m.burbn.instagram.IGlmageCache/ ea 
bd8e6592046032248f3e7a6385b6 

on/7DCF1696-B768-4516-96A4- 
Bani 16CD467E46E 1/Library/Caches/co 
MD5: d0119eaa6b9dd7ab49ebc0e6a2d6 m.burbn.instagram.IGImageCache/ 
ad2d bd8e6592046032248f3e7a6385b6 
63bf : 0x0 (Size: 20016 bytes) 
74 | Name: 4293992140271145730 Size (bytes): 822551 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-25 10:01:38(UTC+1) 
4207fa93345 files full.zip/private/v a "TT 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-25 10:01:38(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-25 10:01:38(UTC+1) 
map file manager 3 SCCOntent ca | Source file 373fd2e35eced361b8ff2ca4a54ab 
HAT pafa. = 4207fa93345 files full.zip/private/v 
PD. 40271145 ar/mobile/Containers/Data/Applicati 
730 on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
MD5: b2c298a1f1593d9dc80c1e0a6cd6b nap.file manager 3 SCContent ca 
858 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/4293992140271145 
730 : 0x0 (Size: 822551 bytes) 
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75 


Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 
4207fa93345 files full.zip/private/v Modified: 
ar/mobile/Containers/Data/Applicati odmed: 
on/77919778-DC8B-4FED-9F7E- Accessed: 
0DB1B276E89C/Documents/com.s 


ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- Accessed: 
0DB1B276E89C/Documents/com.s 


ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- Accessed: 
0DB1B276E89C/Documents/com.s 

nap.file manager. 3. SCContent ca Source file 
10df2d-08df-4a1 c-b8fe- 
96f409f9b03d/1389987708816974 
2465 


MDS: 541cd4dee386583bcdecba083d28 
881b 


78 
19F43A21/0BE@3x.ktx 


Created: 
Path: 373fd2e35eced361b8ff2ca4a54ab Modified: 
42071293345 files full.zip/private/v | Modified: 
ar/mobile/Containers/Data/Applicati | Accessed: 
on/06B4B7A0-A991-4F2E-B94A- 
D6285790191B/Library/SplashBoar | Source file 
d/Snapshots/scenelD/com.apple.m 
obilesafari-724627 A4-A9DC-4685- 
8B62-FCF71AD444ED/F33BA54D- 
14B9-4AF9-B996- 
79F43A2170BE@3x.ktx 


MDS: 62e9df42f17cbada568763d4122bb 
528 


Name: 11189792456584331068 Size (bytes): 


nap.file manager. 3. SCContent ca Source file 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1118979245658433 
1068 

MD5: f9347955bfc9de1709398f6c3b18a 
3d7 

76 | Name: 3191865343659618511 Size (bytes): 

Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 

42071293345 files full.zip/private/v Modified: 


nap.file manager 3 SCContent ca | Source file 
10df2d-08df-4a1 c-b8fe- 
96f409f9b03d/3191865343659618 
511 

MD5: b5b64632737b93f7e326ee987cab 
3e51 

77 | Name: 13899877088169742465 Size (bytes): 

Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 

4207fa93345_files_full.zip/private/v Modified: 


Name: F33BA54D-14B9-4AF9-B996- Size (bytes): 


700984 
2021-02-25 10:01:38(UTC+1) 
2021-02-25 10:01:38(UTC+1) 
2021-02-25 10:01:38(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
42071293345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1118979245658433 
1068 : 0x0 (Size: 700984 bytes) 


165387 

2021-02-25 10:14:10(UTC+1) 
2021-02-25 10:14:10(UTC+1) 
2021-02-25 11:12:22(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/3191865343659618 
511 : 0x0 (Size: 165387 bytes) 


156559 

2021-02-25 10:39:07(UTC+1) 
2021-02-25 10:39:07(UTC+1) 
2021-02-25 10:39:07(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1389987 708816974 
2465 : 0x0 (Size: 156559 bytes) 


186818 
2021-02-25 11:26:59(UTC+1) 
2021-02-25 11:26:59(UTC+1) 
2021-02-25 11:26:59(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
42071293345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/06B4B7A0-A991-4F2E-B94A- 
D6285790191B/Library/SplashBoar 
d/Snapshots/scenelD/com.apple.m 
obilesafari-724627A4-A9DC-4685- 
8B62-FCF71AD444ED/F33BA54D- 
14B9-4AF9-B996- 
79F43A2170BE@3x.ktx : 0x0 
(Size: 186818 bytes) 
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Bild 1 


18:54 


4 Meddeland... 


Klart Booking 


Bekraftad 


Din boendebokning 


Bekraftelsenummer: 3140614205 [D 
Pinkod: 5596 [| 


Clarion Hotel Stockholm 


KKK 


© Ringvagen 98, 10460, Stockholm 


Fa vagbeskrivning 


& +46 8 4621030 


Kontakta boendet 


Incheckning Utcheckning 
lör 13 feb. 2021 män 15 feb. 2021 
fran 15:00 till 12:00 


Administrera din bokning 
Regler for boendet 


Totalt pris for 2 rum och 2 natter 


cirka 4 032 SEK & 
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Bild 2 

20:32 at 4G 8 

y PelleP vo > 

===  Férundersókningsprotokoll (23 18) 

| @ktbil 325.pdf 
-- docdroid.net 

PELLEP 

Ár utanfór 


Sag henne o hissen 
Aina kolla som fan har utanfór 
Dom har span pa detta hotell 


© Skicka en chatt 


Kæ 
© 
© 
Qy 


QIWLEITRITIYVYIUITIOIPIA 


4 uZIXICIVIBINIM 
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Bild 3 
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Bild 4 
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Bild 6 
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Bild 7 
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Bild 8 
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> 


^ 
we 


TIPS 


Valkommen till iPhone X 
Tips för att komma igang 


Svep uppat for att 
lasa upp 


atl 4G m) 
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Bild 12 


Samen CIUS 
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AA & facebook.com 


Profilbilder 


Rabi Mousa 


Profilbilder - 28 dec 2020 - 


Visa i fullstandig storlek - Fler alternativ 


Mala 


Bild 13 
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Bild 15 
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Bild 16 
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Bild 17 
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Bild 19 


Bilaga 2.2 Bilder - förstoring, 2023-11-01 14:47 diarienr: 5000-K189802-21 286 


Bilaga 2.2 Bilder - förstoring, 2023-11-01 14:47 diarienr: 5000-K189802-21 


287 


Bild 21 


Bilaga 2.2 Bilder - förstoring, 2023-11-01 14:47 diarienr: 5000-K189802-21 


288 
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N / Re / 
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^ 


PÅ 
LAN 


77 
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Bild 24 
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16:34 al 4G » 
& flashback.org 


Logga in * 


all VCI AG d OVCTICVL, = VDUTRUE Val ala Va c 9 = 
nyhet an en liten notis . Just för att det ändå hände 1930 , 
i ett lugnt omrade pa ett upplyst torg , med massa folk i 


narheten . 
= @ Citera 
Bi Idag, 15:18 + #138 
a Lem 837 


Enligt PM stammer det att han heter Kim född 93. Han ar 
fran Göteborg. 


së ® Citera 
Hy Svara w f « < M 
Stód Flashback 


Flashback finansieras genom donationer fran 
vara medlemmar och besökare. Det ar med hjàlp 
av dig vi kan fortsatta erbjuda en fri 
samhällsdebatt. Tack för ditt stöd! 


Swish: 123 536 99 96 
Bankgiro: 211-4106 


Flashback International Inc 
1461 First Avenue, New York, NY 10075-2201, USA 


A-O FAQ Regler Integritet Moderatorer 


Översikt Annonsera Kontakt 
PE PS CES, 
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22:23 al 3G B > 


& booking.com 


Arken Hotel & Art Garden Spa 


kkk 
Nordatlanten 100, Göteborg — Visa pa karta 


Bra 
7,7 484 recensioner 


Boka 2 natter nu 


Boendebeskrivning 


Arken Hotel & Art Garden Spa ligger i hamnområdet 
Arendal, bara 15 minuters bilresa från centrala 
Göteborg. Hotellet erbjuder gratis WiFi och en 
bokningsbar spaavdelning. Hår finns åven kostnadsfri 
parkering och en laddstation för elbilar. Alla ... 


Faciliteter 
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Bild 30 
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SVERIGE SWEDEN SUÉDE 


P twi 


— y“ 


POLISMYNDIGHETEN na a h Ad 


IX«X«MAHADXABDULLAHI««««««««««««««««««« 
34«3SWE9610253M2106238199610250731««68 
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03:16 


ul 4G NB: 


& europcar.com 
A TUT u quyt J uuys 
More details 


Your vehicle will be allocated at the station. Please remember 
to bring the credit card noted above with you to the rental 


location for verification purposes. 


Stockholm Bromma Airport 
February 23, 2021, 3:00 PM 
February 28, 2021, 3:00 PM 


your vehicle 


Change > 


AUDI A4 AVANT AUT 4X4 2.0 Change > 


or similar 


Premium 


Base rate 


Pay later 
Estimate price based on 


exchange rate 


Guaranteed price 


Bild 32 


Minimum Age: 18 
Unlimited mileage 


Automatic Transmission 


On request @ 


SEK 5,737.50 


SEK 5,737.50 


SEK 5,737.50 


VAT(See full T&Cs) 
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AA & europcar.se È; 


Europcar 


STOCKHOLM ULVSUNDA 


Biluthyrning 


© STOCKHOLM ULVSUNDA 


En Annan Återlåmningsplats? 
02.23.2021 O 10:00 
= 02.24.2021 © 10:00 
Jag är Jag bor i 
26+ W Sweden w 


Jag har ett kundnummer 


Bild 33 


300 


HEMLIG 
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Vgd fuckers 


1 "A 


302 
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13:19 7 ai ` = Ca 

AA & taxijakt.se ei 
— Ange telefonnummer « Tillbaka 
Meny 


Din bestallning 


E + Telefonnummer ex. +46709999999 


Email (valfritt, för kvitton och vardekoder) 


LAGG TILL BETALKORT 


Ditt Pris 


659 SEK 


20% RABATT 


Betala i bilen 


Bild 36 


Bilaga 2.2 Bilder - förstoring, 2023-11-01 14:47 diarienr: 5000-K189802-21 303 


TELEPHONE NO. FOR CHECK OF VALIDITY 
SWEDISH POLICE «46 77 114 14 00 
— P — m 


SVERIGE SWEDEN E Ais 


E d od Cose 
L| 
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Bild 38 


a 
J j Provtagning com 
på Birger Jurisgatan 39, SE-111 45 Stockholm 

sales Qprovtagning.com 

PROVTAGNING 


To whom it may concem 


Covid-19 RT PCR-Test 


This is to certify that 

MUHAMMED KHALID, AL! 

Date of Birth 0101 Aa 
Citizenship: Sweden 
Passport Number: 
Personal Identity Number. 0101 E | 


Has been tested NEGATIVE for SARS-CoV-2 (Covid-19) with a RT-PCR nucleic acid test 
Date of test: 23" of February 2021 at 10:15 AM 


Stockholm 23" of February 2021 


Dr. Apostolos Mintoglou 
GPMD 


Dokdorgrupoen Berger Jartegatan 39 Mat sales Doruvtagrmg com 
Provtaaning com SE-111 45 Stockholm 
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Bild 39 


Les 
pl | Proviagning com 
ES 4 Birger Jarlsgatan 39, SE-111 45 Stockholm 
sales@proviagning.com 


PROVTAGNING 


To whom it may concem 


Covid-19 RT PCR-Test 
This is to certify that 

STEFAN ZORAN, ALEKSIC 

Date of Birth 010604- 
Citizenship Sweden 


Passport Number 


Personal identity Number- 010604 MS 


Has been tested NEGATIVE for SARS-CoV-2 (Covid-19) with a RT-PCR nucleic acid test. 
Date of test: 23” of February 2021 at 11:00 AM 


Stockholm 23” of February 2021 
pote leg 


Dr. Apostolos Mintoglou 
GPMD 


OR-code for 
Certificate Validation: 


Doktorgruppen Birger Jarlsgatan 39 Mail. sales@provtagning com 
Provtagning com SE-111 45 Stockholm 
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Bild 40 


FEE 
på Birger Jartsgatan 39, sm 45 Stockholm 
sales provtagning com 
PROVTAGNING 
To whom it may concern 
Covid-19 RT PCR-Test 
This is to certify that 


MAHAD ABDULLAHI, ALI 


Date of Birth: 961025-0731 
Citizenship: Sweden 
Passport Number: 91639034 
Personal Identity Number. 961025-0731 


Has been tested NEGATIVE for SARS-CoV-2 (Covid-19) with a RT-PCR nucleic acid test. 
Date of test: 23” of February 2021 at 10:45 AM. 


Stockholm 23” of February 2021 


Doktorgruppen Birger Jarisgatan 39 Mait sales @provtagning com 
Provtagning com SE-111 45 Stockholm 
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fe 
pl Provtagning.com 
I Bayer Jarisgatan 39, SE-111 45 Stockholm 
sales @provtagning.com 
PROVTAGNING 


To whom it may concern 
Covid-19 RT PCR-Test 


This is to certify that 


FERDI, KÜCÜKGÓL 
Date of Birth 990521 
Citizenship: Sweden 


Passport Number EE 
Personal identity Number: 990521 a 


Has been tested NEGATIVE for SARS-CoV-2 (Covid-19) with a RT-PCR nucleic acid test. 
Date of test: 23” of February 2021 at 10:30 AM 


Stockholm 23" of February 2021 


Dr. Apostolos Mintoglou 
G.P M.D 


QR-code for 
Certificate Validation: 


Doktorgruppen Birger Jartsgatan 39 Mail salesfzprovtagning com 
Provtagnina.com SE-111 45 Stockhoim 
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Bild 42 
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kh 
kriget i goteborg 41m 


@KRIGET_I_GOTEBORG 


| tak 
NG |! 
MVH AU | 


Skicka meddelande 
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i kriget_i_goteborg 40m 


Skicka meddelande 
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a 
kriget_i_goteborg 2h 


Hahahha bror jag och 4 vanner 
gick in i tynnered och bade 
markera och gahla folk som 

ar aldre än oss dom snackar 
bar bakom skarmen men allt 


harifran vet att tynnered barn 
inte vagae göra nagot och ar 

radda for frölunda jag svar pa 
min morsa d har ar sant 


Skicka meddelande 
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i kriget_i_goteborg 42m 


Skicka meddelande 


Bild 47 
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LI 
kriget i goteborg 2h 


Frölundas falang misshandlade 
tynnered i deras egna trakt, 
tynnered är ett stort skämt 


O även tynnereds gangledare 
blev klippt pa öppengata vid 
frölunda torg 


Sen dess har ingen i tynnered 
vagas synas o lamnat helt, 
frölunda falangen har kort Over 
tynnered totalt och har stor 
makt och aven alierade med 
alikhan slakten o hela hjällbo 


Skicka meddelande 
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Skicka meddelande 
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Bild 50 
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Bild 51 
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Bild 53 
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05:12 Ail ^ 
a gp.se 


Göteborgs-Posten ` d @ = 


De befann sig da pa en parkeringsplats i danska 
Lyngby. I ett obevakat 6gonblick sag mannen sin 
chans att fly — och tog den. 


Gärningsmännen lyckades dock hålla sig undan 
fram till slutet av november. 


Dä greps fyra män i Herlevs kommun, norr om 
Köpenhamn, och det skedde inte av en slump. Pä 
Twitter berättade dansk polis att tillslaget var 
resultatet av en läng spaningsinsats. 


Kidnappningshändelsen är emellertid inte det 
enda brott de fyra Göteborgskillarna misstänks 
för. 


Planen: Spränga värdedepä och elda 
bussar 

Utredningen visar att de under sensommaren och 
hösten 2019 förberett ett rän mot 
värdehanteringsföretaget Loomis penningdepä i 
Köpenhamnsförorten Tästrup. 


— Det har ar personer med kapacitet att försöka 
genomfora ett brott av den har 
storleksordningen. Nagra av dem är till exempel 
vapentränade i utlandet, säger kommissarie Dan 
Windt, chef för lokalpolisomrade Syd i Göteborg. 


Bild 55 ee 
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Bild 56 


18:40 wil PE 


& dn.se 


DN. Loggain 


Om vara annonser 


|STHLM 

Aklagare: "Polisen förhindrade 
ett mord pa kand 
gangkriminell” 


UPPDATERAD 2019-03-13 PUBLICERAD 2019-03-12 


RÄV = AT r 
Två Kalasjnikovs slängdes ut ur bilen när biljakten på 
männen inleddes. De påträffades efter flyktvägen. Pilarna 
visar på ammunition som också slängdes ut. Foto: Polisen 


När den utpekade gängledaren för 
Bredängsnätverket, som sköts till döds 
under en biljakt i Mariehäll, begravdes 
bar de hans kista. Nu står männen inför 
rätta, åtalade för förberedelse till mord 


och tva grova vapenbrott. Enligt 
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Bild 57 


19:16 “ll 4G E) 
AA & airbnb.se C 
X 
Din resa 

INCHECKNING UTCHECKNING 
2021-02-25 2021-02-28 
GASTER 

2 gaster 

828 kr x 3 nátter (?) 2 484 kr 
Specialerbjudande: 8% rabatt (?) -199 kr 
Serviceavgift © 403 kr 
Totalt 2 688 kr 


Boka nu och spara 25 % Lidija ® 
erbjuder en engangsrabatt för 
dina resdatum. Boka snart för 


att fa detta 


Reservera 


< 


nm a 
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Han vet ingenting han har blivit kidnappad 1 
kanin om ni vill ha eran bror tbaka 
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CO) 


5 ki o balen vilken jävla resa 
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Bild 62 
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23:26 il 4G m 


4,” Ruglömederbort en storanama X 
i Tynnered fran M-falangen 
Mahad kallas for woria G nu 
han har muckat de ar manga i 
Frölunda som ar rädda för hans 
namn de är han som ligger 
bakom alla mord Tynnered 
han ar tjockens hitman han 
satt inne 2ar sen nu nar han 
kom ut de borja handa saker 
de ar sakert han som ligger 
bakom den skjutning i Sthlm 
riktigt fet kille. Dom har sma 
snorungarna i Frolunda suger 
av honom och deras som 
kallade äldre ziad ar livrädd för 
honom 


Plus han har manga kontakter 
han sjalv kor över G falangen 
han har gjort sa mkt mer han ar 
kande runt Sverige filterlós kille 
minst han har gjort 10-11 mord 


Skicka meddelande 
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00:02 a 4G 85) 
< gbg gangwars ... 
2 891 78 
Inlagg Foljare Foljer 


GBG 

INLAGG OM HANDELSER! GOTEBORG ! ! 
STAR INTE PA NAGONS SIDA ! 

NÄMNER INGA NAMN GD 

SKICKA INFORMATION OCH BILDER I DM I 
Följs av omaar.r och titow .1 


Det här kontot är privat 
i ©) ) Följ det här kontot för att se dess foton och 


videoklipp. 
Förslag för dig Visa alla 


Absmx B.A k 


Absmx libertaa7 


VEE 
BE: 


nad 8 0 6 


Bild 65 
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«ill Comviq => 00:27 46 % 19) 


«e D O 


a D q _g an q wars 


Din lilla kuksugare du tror att du 
kan skriva vad du vill om folk och 
att du e grön for du har vpn 


Men inte lange till 


Ska ge dig ett tips stang aldrig av 
din vpn 


Ja sa jag nämner inga namn a jag 
lagger respekt t folk 


ag Som ja gjorde t dig i början 
Dubbeltryck for att gilla 


Assa nàmner inga folk haaaa 


Du skriver om tnd och skriver om 
tjocken haaa 


Om du stanger av din vpn det 
kommer bli det sista du gór 


© Meddelande ... (^ m 


Bild 66 
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Bild 68 
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gyrieneimen ote 
Nasjonalpark 
NORGE 
S „Lillehammer 
pamar 
gervidda e ot illestrøm 
P 
jal Park Oslo? 
Nd 
I 
NET | T 
| 
ookien mg ofredrikstad 
gtarvik: "y 
| 
A 
bk ` 
/ 
7 
Kristiansand 3 N A 
PAGA. EQ i 


Arbete Lagg till 


© 


OKarista 
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Bild 70 


Bilaga 2.2 Bilder - förstoring, 2023-11-01 14:47 diarienr: 5000-K189802-21 


337 


Bild 71 
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AA ê secure.booking.com Q, 


NAT AND Uit IVIYL ACT MUNYL 


Booking 
Y Grattis! Din bokning är nu 
bekräftad. 


Vi har skickat din bokningsbekräftelse till 
mahad_a996@hotmail.com 


Uppdatera din e-postadress 


ES Boendet sköter alla betalningar. Lås mer 
om hur du betalar här nedanför eller ring 
boendet på +46 54 67 00 00. 


w Du kan ändra din bokning online når som 


helst 
Bekräftelsenummer PIN-kod 
2380.437.025 8388 


Allt för din resa, på ett och samma ställe 


[? Ladda ner bekräftelse X 


TAXI _Chauffören väntar pá dig och kör dig 
< on © 
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Extraction Report - Apple iOS Full File system 


Data Files (19) 


...? 
KL D 
Zeg 


Cellebrite 


www.cellebrite.com 


Videos (19) 
# File Info Additional file info Thumbnail | Deleted | 
1 Name: 14597307948678996609 Size (bytes): 1163413 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-14 00:21:00(UTC+1) 
4207fa93345_files_full.zip/private/v ET ue 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-14 00:21:00(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-14 00:21:00(UTC+1) 
en e Source file 373fd2e35eced361b8ff2ca4a54ab 
nap.file manager. 3 SCContent ca : dois 
ir zi T 42071293345 files full.zip/private/v 
dM dU ar/mobile/Containers/Data/Applicati 
ee POSING a Te Cad on/77919778-DC8B-4FED-9F7E. 
0DB1B276E89C/Documents/com.s 
MD»: fd392dfc0b922f2f62b90f3944ebc9 nap.file_manager_3_SCContent_ca 
56 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1459730794867899 
6609 : 0x0 (Size: 1163413 bytes) 
2 Name: 13886533954932771870 Size (bytes): 1517655 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-14 16:16:35(UTC+1) 
4207fa93345_files_full.zip/private/v ELSE. AS 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-14 16:16:35(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-14 16:16:35(UTC+1) 
EN AE 373fd2e35eced361b8ff2ca4a54ab 
nap.file_manager_3_SCContent_ca 42071293345 files full. zip/private/ 
ee aning arimobile/Containers/Data/Applicati 
ee 388653395493277 0n/77919778-DC8B-AFED-9FTE- 
0DB1B276E89C/Documents/com.s 
MD5: 2bb9e5ed869821d1965c745d9537 nap.file manager 3 SCContent ca 
c130 10df2d-08df-4a1c-b8fe- 
967409f9b03d/1 388653395493277 
1870 : 0x0 (Size: 1517655 bytes) 
3 Name: 13205021467146358958 Size (bytes): 2594723 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-14 18:10:53(UTC+1) 
4207fa93345_files_full.zip/private/v VE BEN 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-14 18:10:53(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-14 18:10:54(UTC+1) 
ia. Source file 373fd2e35eced361b8ff2ca4a54ab 
nap.file manager 3 SCContent ca 42071293345 files full.zip/private/ 
Jug rus ue ris Srmoblle Containere! Data/Applicati 
dal 320502146714635 0n/77919778-DC8B-AFED-9F7E- 
0DB1B276E89C/Documents/com.s 
MD5: 6880e4bdd919f1cc0558ef8bafcc18 nap.file manager 3 SCContent ca 
d4 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1320502146714635 
8958 : 0x0 (Size: 2594723 bytes) 
4 Name: 18188217790755820312 Size (bytes): 1249875 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-14 18:30:34(UTC+1) 
4207fa93345_files_full.zip/private/v i N "ra 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-14 18:30:34(UTC+1) 
NAG Ga Accessed: 2021-02-14 18:30:34(UTC+1) 
ocuments/com.s 
nap.file manager 3 SCContent ca | Source file E cree a] nen 
dard Don dla ar meblle Containere! Data/Applicati 
Geert 818821779075582 0n/77919778-DC8B-AFED-9F7E- 
0DB1B276E89C/Documents/com.s 
MD5: d23deec595731fe0a20515372abdf nap.file manager 3 SCContent ca 
4a8 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1818821779075582 
0312 : 0x0 (Size: 1249875 bytes) 
5 Name: 4227528025789708543 z1015839 | Size (bytes): 488619 
Å HETTE NE Created: 2021-02-14 20:19:28(UTC+1) 
ath: 373fd2e35eced361b8ff2ca4a54ab ST GUN. 
42071293345 files_full.zip/private/v | Modified: 2021-02-14 20:19:28(UTC+1) 
arimebila.Cokam ore E Accessed: 2021-02-14 20:19:29(UTC+1) 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s | Source file AE T ee 
nap.file_manager_3_SCContent_ca j bil ic a OS | Se GE M 
10020 nar da cbse a Dats Appel 
96f409f9b03d/4227528025789708 ODBIB276EBOC/D E å / a 
543 710158397744866479601 J MN 
nap.file_manager_3_SCContent_ca 
MDS: a87e1035386c7a67800eff6f6dbd4 10df2d-08df-4a1c-b8fe- 
8c3 96f409f9b03d/4227528025789708 
543_z10158397744866479601 : 
0x0 (Size: 488619 bytes) 
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Bila 
6 


2d6 


10df2d-08df-4a1c-b8fe- 
96f409f9b03d/4226521476188449 
108 : 0x0 (Size: 688335 bytes) 


Name: 4480407709622053340_z1789502 | Size (bytes): 1775146 
SO Tan Created: 2021-02-16 03:06:32(UTC+1) HEMLIG 
Path: 373fd2e35eced361b8ff2ca4a54ab aa: M" 
42071293345. files. full.zip/privateyv | Modified: 2021-02-16 03:06:32(UTC+1) e 
ar/mobile/Containers/Data/Applicati | Accessed: 2021-02-16 03:06:34(UTC+1) v 
on/77919778-DC8B-4FED-9F 7E- 
0DB1B276E89C/Documents/com.s Source file te AG b8ff2ca4a54ab 
nap.file manager 3 SCContent ca 071293345 files full.zip/private/v 
10dí2d-08df-4a1c-b8fe- ar/mobile/Containers/Data/Applicati 
96f40919b03d/4480407709622053 ON BET HO I Å 
340 -217895026267427478952 nap file manager 3 SCContent ca 
MDS: 4e49ef54d3a9fba34df9cba0f75112 10df2d-08df-4a1c-b8fe- 
c9 96f409f9b03d/4480407 709622053 
340 717895026267427478952 : 
0x0 (Size: 1775146 bytes) 
7 Name: 17535379013467586031_z385262 | Size (bytes): 1577076 
PER es Created: 2021-02-16 11:35:18(UTC+1) 
Path: 373fd2e35eced361b8ff2ca4a54ab PNE ^L 
42071293345, files_full.zip/private/v | Modified: 2021-02-16 11:35:18(UTC+1) 
ar/mobile/Containers/Data/Applicati | Accessed: 2021-02-16 11:56:09(UTC+1) 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s Source file 373fd2e35eced361 b8ff2ca4a54ab 
nap.file manager 3 SCContent ca 4207fa93345 files full.zip/private/v 
1 Odf2d-08df-4a1c-b8fe- a ar/mobile/Containers/Data/Applicati 
96f409f9b03d/1753537901346758 SE E 
6031. z3852621024195818852 nap.file manager 3 SCContent ca 
MD5: 98119fb536b04b3aa51b7d82adb6 10df2d-08df-4a1c-b8fe- 
c792 96f409f9b03d/1753537901346758 
6031 z3852621024195818852 : 
0x0 (Size: 1577076 bytes) 
8 Name: 10424013450513099805 z342076 | Size (bytes): 1570710 
01185862299684 Created: 2021-02-16 11:35:18(UTC+1) 
Path: 373fd2e35eced361b8ff2ca4a54ab an uber 
4207fa93345 files full.zip/private/v | Modified: 2021-02-16 11:35:18(UTC+1) 
ar/mobile/Containers/Data/Applicati | Accessed: 2021-02-16 11:56:10(UTC+1) 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s Source file ee b8ff2ca4a54ab 
nap.file manager 3 SCContent ca 071293345 files full.zip/private/v 
10df2d-08df-4a1c-b8fe- ar/mobile/Containers/Data/Applicati 
9640919b03d/1042401345051309 EL eee hee n 
= nap.file_manager_3_SCContent_ca 
MD5: 1d624f72b666c56d778856d9ff50b 10df2d-08df-4a1c-b8fe- 
6f1 96f409f9b03d/1042401345051309 
9805 z3420760185862295834 : 
0x0 (Size: 1570710 bytes) 
9 Name: 5461983690970207647 Size (bytes): 444903 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-22 03:29:49(UTC+1) 
4207fa93345_files_full.zip/private/v gr ER 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-22 03:29:49(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-22 03:29:49(UTC+1) 
EE De | Source file 373fd2e35eced361b8ff2ca4a54ab 
p.file_manager_3_SCContent_ca = S x 
10df2d-08df-4a1c-b8fe- AE ee 
96f409f9b03d/546 1983690970207 ap EN ENE EE 
on/77919778-DC8B-4FED-9F7E- 
und 0DB1B276E89C/Documents/com.s 
MD5: 0ed366aa64bbbf45d1cc1f74718e6 nap.file_manager_3_SCContent_ca 
125 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/5461 983690970207 
647 : 0x0 (Size: 444903 bytes) 
10 Name: 17057422906491364814 Size (bytes): 1754553 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-24 01:17:13(UTC+1) 
4207fa93345 files full.zip/private/v TA ds; 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-24 01:17:13(UTC+1) 
on/77919778-DC8B-4FED-9F 7E- Accessed: 2021-02-24 01:17:14(UTC+1) 
OPB18276ES9LIPocuments/Com:S | source file 373fd2e35eced361b8ff2ca4a54ab 
nap.file manager 3 SCContent ca 22 z à à 
Nose Dba cb du Sea Mae 
96f409f9b03d/1705742290649136 ar 
on/77919778-DC8B-4FED-9F7E- 
4814 0DB1B276E89C/Documents/com.s 
MD5: 5f4d786f79c22276ab84c3c1aee91 nap.file manager 3 SCContent ca 
989 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1705742290649136 
4814 : 0x0 (Size: 1754553 bytes) 
11 | Name: 4226521476188449108 Size (bytes): 688335 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-24 01:17:14(UTC+1) 
4207fa93345 files full.zip/private/v TN SE) 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-24 01:17:14(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-24 01:17:14(UTC+1) 
a Source file 373fd2e35eced361b8ff2ca4a54ab 
nap.file manager. 3 SCContent ca : Å : 
10df2d-08df-4a1c-b8fe- Aa ee EE 
96f409f9b03d/4226521476188449 SE 
on/77919778-DC8B-4FED-9F7E- 
108 0DB1B276E89C/Documents/com.s 
MD5: 690cbe8e8 139e55807fb48d3d69f9 nap.file manager 3 SCContent ca 


6905 


4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLEI/I 
MG_0096.MP4 : 0x0 (Size: 
5204877 bytes) 
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12 Name: 5247936771058335370 Size (bytes): 1631926 - HEM) I G 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-24 02:22:45(UTC+1) 
4207fa93345_files_full.zip/private/v az; ER 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-24 02:22:45(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-24 02:22:46(UTC+1) 
nap file manager 3 SCContent ca | Source file 373fd2e35eced361b8ff2ca4a54ab 
10df2d-08df-4a1c-b8fe- = 4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
96M0919b03d/524793677 1 058335 0n/77919778-DC8B-4FED-9F7E. 
0DB1B276E89C/Documents/com.s 
MD5: 193e86098338f6caa86f01050a16e nap.file manager 3 SCContent ca 
572 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/52479367 71058335 
370 : 0x0 (Size: 1631926 bytes) 
13 Name: 2379252293998364734 75487940 | Size (bytes): 1049278 
ma APA Created: 2021-02-24 20:24:49(UTC+1) 
ath: 373fd2e35eced361b8ff2ca4a54ab PEN 
42071293345 files_full.zip/private/v | Modified: 202102 ae al) 
ar/mobile/Containers/Data/Applicati | Accessed: 2021-02-24 20:24:51(UTC+1) 
Se EP Soares fie 373fd2e35eced361b8ff2ca4a54ab 
nap.file manager. 3 SCContent GÅ 4207fa93345_files_full.zip/private/v 
10df2d-08df-4a1c-b8fe- = ar/mobile/Containers/Data/Applicati 
96f40919b03d/2379252293998364 on/77919778-DC8B-4FED-9F7E- 
734 25487940372872252701 0DB1B276E89C/Documents/com.s 
= nap.file_manager_3_SCContent_ca 
MD5: c87ebad408062ee1c1e101afeb8e 10df2d-08df-4a1c-b8fe- 
bad1 96f409f9b03d/2379252293998364 
734_z5487940372872252701 : 0x0 
(Size: 1049278 bytes) 
14 | Name: 1626358574841032624 Size (bytes): 1891871 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-24 20:24:52(UTC+1) 
4207fa93345_files_full.zip/private/v "NES GR 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-24 20:24:52(UTC+1) 
on/77919778-DC8B-4FED-9F7E- | Accessed: 2021-02-24 20:24:52(UTC+1) 
Ge file manager CCo ca | Source file 373fd2e35eced361b8ff2ca4a54ab 
10df2 d-08df-4a10-b8fe- = 4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
Ja 626358574841032 0n/77919778-DC8B-AFED-9E7E- 
0DB1B276E89C/Documents/com.s 
MD5: cc7274619795a5331c970a7b7ac6 nap.file manager 3 SCContent ca 
c954 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1626358574841032 
624 : 0x0 (Size: 1891871 bytes) 
15 Name: 16109286666264533292 Size (bytes): 1240808 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-25 02:56:33(UTC+1) 
4207fa93345 files full.zip/private/v EAR EG. 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-25 02:56:33(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-25 02:56:35(UTC+1) 
ea cese | Source file 373fd2e35eced361b8ff2ca4a54ab 
10df2d-08df-4a1c-b8fe- ig 4207fa93345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
cee 610928666626453 0n/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
MD5: 3d05b708b894ccc19731073fa61ac nap.file manager 3 SCContent ca 
e15 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1610928666626453 
3292 : 0x0 (Size: 1240808 bytes) 
16 | Name: 8267428812867997299 Size (bytes): 542274 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-25 03:14:51(UTC^ 1) 
42071293345 files full.zip/private/v TES ore 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-25 03:14:51(UTC+1) 
on/77919778-DC8B-4FED-9F7E- | Accessed: 2021-02-25 03:16:10(UTC+1) 
nap file manager  SCConiGat ca | Source file 373fd2e35eced361b8ff2ca4a54ab 
10df2d-08df-4a1c-b8fe- n 42071293345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
36f409f9b030/8267428812867997 0n/77919778-DC8B-4FED-9E7E. 
0DB1B276E89C/Documents/com.s 
MD5: ef822229c06858abef0c1611a1a02 nap.file_manager_3_SCContent_ca 
024 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/8267428812867997 
299 : 0x0 (Size: 542274 bytes) 
17 |Name: IMG 0096.MP4 Size (bytes): 5204877 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-25 04:26:15(UTC+1) 
4207fa93345_files_full.zip/private/v PS CAN 
ar/mobile/Media/DCIM/100APPLE/| | Modified: 202120825 05,251 UTC#)) 
MG_0096.MP4 Accessed: 2021-02-25 04:26:15(UTC+1) 
MD5: 1c5051faae570aa4a53bbba27232 | Source file 373fd2e35eced361b8ff2ca4a54ab m 
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Bil 
IE ila 


Name: 


Path: 


MD5: 


Name: 


Path: 


MD5: 


cm-chat-media-video- 
eMfPWBEd2z1xhX79ZemxN.mov 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Library/Persistent/ 
SCMedia/cm-chat-media-video- 
eMfPWBEd2z1xhX79ZemxN.mov 


df4fc334f603466afe6c281 1504d24 
a4 


cm-chat-media-video- 
gZA0rQZiz6wGe/z3esh2R.mov 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Library/Persistent/ 
SCMedia/cm-chat-media-video- 
qZAOrQZizewGe7z3esh2R.mov 


9b24577ec0adf1dacf83af8481663 
904 


Size (bytes): 


Created: 
Modified: 
Accessed: 
Source file 


Size (bytes): 


Created: 
Modified: 
Accessed: 
Source file 


2026078 

2021-02-25 10:01:37(UTC+1) 
2021-02-25 10:01:37(UTC+1) 
2021-02-25 10:01:37(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
42071293345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F 7E- 
0DB1B276E89C/Library/Persistent/ 
SCMedia/cm-chat-media-video- 
eMfPWBEd2z1xhX79ZemxN.mov ` 
0x0 (Size: 2026078 bytes) 


1858877 

2021-02-25 10:01:39(UTC+1) 
2021-02-25 10:01:39(UTC+1) 
2021-02-25 10:01:39(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F 7E- 
0DB1B276E89C/Library/Persistent/ 
SCMedia/cm-chat-media-video- 
qZA0rQZiz6wGe7z3esh2R.mov : 
0x0 (Size: 1858877 bytes) 
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Video 3 


Video 4 
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Video 5 


Video 6 
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Video 7 
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Video 8 


Video 9 
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Video 10 


Bilaga 3.2 Video - förstorade dumpar ur filmklipp, 2023-11-01 14:47 diarienr: 5000-K189802-21 355 


Video 11 
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Video 14 


Video 15 
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Snapchat Report 


Fran tómningen av beslagtagna telefonen 2021-5000-BG24357-10 har hamtats information om 
telefonens Snapchat-konto. Detta genom en typ av tómning som resulterar i en Snapchat Report. 


| detta dokument redovisas inte samtligt inneháll i Snapchat report utan ett urval som bedóms ha 
betydelse för utredningen. Viss del av innehållet har även extraherats i telefontómningen som gjorts i 
UFED. Tider i bródtexten i detta dokument anges i svensk reell tid. Tider i presenterade tabeller 
anges i UTC-tid. 


Snapchat-kontot pa telefonen har Username "mahadmose4211": 


userId | rowid username | 
cal0d£2d-08df-4a1c-b8fe-96f409£9b03d [111516 mahadmose4211 | 


Konversationer 


1. Ur det extraherade materialet syns en konversation med användaren "ang3lo 5". 
Tidsangivelserna i rapporten visar pá UTC-tid vilket innebár att for att fa reell svensk tid laggs 
1 timma till (svensk vintertid). 


2021-02-24 kl 14:38:32 (svensk reell tid) skickar "ang3lo 5" ett meddelande med innehállet 
"bror haru wickr nánting”. 


2021-02-24 kl 14:50:05 (reell svensk tid) skickar "mahadmose4211" ett meddelande med 
innehállet "Lowlife421". 


username] 
[ca 10df2d-08df-4alc-b8fe-96£409£9b03d | 11516 [mahadmose42 11 | 
7e047386-0472-4fe7-a0ce-1febbe50a494 [11506 ang3lo 5 


Client Conversation ID | Message Content |Creation Timestamp UTC+0|[Read Timestamp UTC+0 | Content Type | Sender ID | Server Message ID 
[04d2d5ec-776b-Secc-a865-80edca106d05| bror haru wickr nánting|2021-02-24 13:38:32 ]2021-02-24 13:51:49 a |[72047386-0472-4fe7-a0ce-1febbe50a494] 16 
04d2d5ec-776b-5ecc-a865-S0edcal06d05|Lowlife421 [2021-02-24 13:50:05 1970-01-01 00:00:00 1 |ca10df2d-08df-4alc-b8fe-96£409£9b03d ||17 
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2. Urdetextraherade materialet syns en konversation med användaren "adamlazarevic". 
Tidsangivelserna i rapporten visar pa UTC-tid vilket innebär att för att fa reell svensk tid laggs 
1 timma till (svensk vintertid). 


2021-02-17 kl 19:43:09 skickar "adamlazarevic" ett meddelande innehállande ett 
telefonnummer "0733004900". 


2021-02-17 kl 19:43:41 skickar "mahadmose4211" ett meddelande med innehållet ”+46 79- 
022 36 62". 


userId | rowid username | 
cal0d£2d-08df-4a1c-b8fe-96f409£9b03d | 11516 |mahadmose42 11 | 
| bfa8b179-3ad9-4d3a-a9a7-d51bf122057d | 11484 ladamlazarevic | 


Client Conversation ID Message Content |Creation Timestamp UTC+0 [Read Timestamp UTC-0| | Content Type | Sender ID - [Server Message ID 
3812047a-6580-57cb-a39d-b022289498e5|0733004900 2021-02-17 18:43:09 — |2021-02-17 18:43:11 å ]pfaSb179-3ad9-4d3a-2927-35 108422057811 
[3812047a-6580-57cb-a39d-b022e89498c5||+46 79-022 36 62 2021-02-17 18:43:41 2021-02-17 18:43:42 1 cal0d£2d-0Sdf-Aalc-bSfe-96f409f9b03d |14 
38120472-6580-57cb-a39d-b022e89498c5 Kvickensvágen 5 |2021-02-17 18:44:01 [2021-02-17 18:44:02 1 |bfa8b1 79-3ad9-4d3a-a9a7-d51bf422057d|18 


3. Ur det extraherade materialet syns en konversation med "mirettemilaja". Av konversationen 
kan man utlasa att parterna skriver karleksfulla meddelanden till varandra som tyder pa att 
de har en karleksrelation. 


Tidsangivelserna i rapporten visar pa UTC-tid vilket innebar att for att fa reell svensk tid laggs 
1 timma till (svensk vintertid). 


2021-02-04 kl 20:26:04 har "mirettemilaja" skickat ett meddelande med innehallet "Va 
tvungen góra ny Mail o den ar 
mahadmose96@outlook.commailto:mahadmose96@outlook.com”. 


2021-02-24 kl 18:52:56 skickar "mirettemilaja" meddelandet "Mahad abdullahi ali!" 
2021-02-24 kl 18:53:05 skickar "mahadmose4211" meddelandet "Va hahahha". 
2021-02-24 kl 18:53:20 skickar "mahadmose4211" meddelandet "Mirette Bollstróm". 
2021-02-24 kl 18:53:29 skickar "mahadmose4211" meddelandet ”Studievågen 43 vad 
hander”. 

2021-02-24 kl 18:54:15 skickar "mirettemilaja" meddelandet "Hahahahha du är inte rolig att 
pranka". 

2021-02-24 kl 18:54:26 skickar "mahadmose4211" meddelandet "Hahahhahaha jaa vet 
baby". 

2021-02-24 kl 18:54:52 skickar "mirettemilaja" meddelandet "Hahahah de meningen att du 
skulle tro jag va arg fór jag sa hela ditt namn ju". 
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[weld — | rovid | username | 
cal0df2d-08df-4alc-bSfe-96£409£9003d [11516 mahadmose4211 ] 
aed38a7a-f7b8-4cb1-bc59-fef2612ea334 


HEMLIG 


Client Conversation ID Message Content TET ap | FAS Timestamp | Content Type Sender ID M a 
[agatha 620-5129 [Hallávilken av Disney prinsessorna är din favorit ? 2021-01-15 23:35:04 [20210115 1 pee nee Je 
Ke [Alls är min Favorit 2021-01-15 23:36:24 a | båfe-96si09596034 [575 
E [Men du ar också de 2021-01-15 233631 Bez | o Je 
Ke [BIA klänning skulle ja säga haha 2021-01-15 23:36:43 a | bsresenoosboa — [7 
Poseer _ |Haahaha yeey 2021-01-15 23:36:55 Pozos | Ga Fr 
VC Hahah varför ville du leka gullig mitt i allt 2021-01-15 23:37:10 [222101115 1 scar rb all 7 
GN Haba jag är gullig baby 2021-01-15 23:37:56 P3327? |} petesenoossbose P 
Ser kan COTO DM AN 3 NT 
se [Mirentemilaja 2021-01-20 22:26:50 1 ese ill s 
a — manazo DAMES 0T 
c mm TD IM GEM 00H D 
a fom TH => 
eo — O A ae as 
Hadatbda-6ada 5329... |Vatvungen göra ny Mail o den år mahadmose96 Zereck commailto:mahadmose96@outlook.com 2021-02-03 19:26:04 [2021-02-04 1 xr uM m 
HSdaib2a-Sa92-5429- — [lmps:/wwwaftonbladet se nyheter/a KRQwev atal-efer-stort-kokainibeslag-i a as Peraza F kalOdPd0Sddale- — [ioi 
b29e-a2e10ac232fe ` |goteborghitps://www.aftonbladet se/nyheter/a/kR Qwev/atal-efter-stort-kokainbeslag-i-goteborg [03:01:31 b8fe-96£10989b03d 
Ke, een 2021-0223 23:15:10 D | bere senosssbose Pie 
EE Im el Fuss ke 
VC |Hahaha baby hur kan du ibte vakna 2021-02-24 12:09:20 [202.0224 1 venei 
ET aas ICONE T 034807 
VE `  |Hahahalıhahahaha 2021-02-24 16:51:29 Kar 1 er [sue 
ra e SEE pan 7 ke 
VE NC ` Va hahahha 2021-02-24 17:53:05 [2024-02-24 1 Error be 
n Kanan O A C407 
GE a mannaa pann I eter fu 
föga bada 5109... (Hahahahha du ar inte rolig att pranka 2021-02-24 17:54:15 [P02110224 ] maces, E 
oue RS (Hahahhahaha jasa vet baby 2021-02-24 17:54:26 RUM 1 eng 15469 
Un EK. (ahahah de meningen att du skulle tro jag va arg för jag sa hela ditt namn ju 2021-02-24 17:54:52 [20210224 1 Ee Jee 
SE "kass E pran RE 
VERT [Átminstonekan du låsas nästa gång hahaha 2021-02-24 17:55:13 2021-02-24 1 VE: vi 
VC [Hahahhahaha oki baby nästa gång 2021.02.24 17:55:31 | 1 ose [es 
dar dad 5429... [Vet du vad? Jag har en fin idé 2021-02-24 18:01:12 [2021-02-24 1 ees bare Eee Aol 77 
a m IUUD a — C307 
Ki [Du kunde bli min pojkvän & 2021-02-24 18:03:10 25552?! |} e ald 
Ki Beie vill inte jue 2021-02-24 18:03:31 |! e dd 
e Men jag tanker bli din flickvän andá 2021-02-24 18:03:55 | 1 a Jw 
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SEES [eee ESTO | a pe 
oe Sada S9 |Detror jag inte 2021-02-24 18:05:37 071-02-24 1 E pp 
[45dadb2a-6a9a-5429- — |https:/www.youtube.com/watch7app=desktopåv=MaUlimSqlEEhttps/www.youtube.com/watch? Lean 18:05:44 [2021-02-24 i aeds8a7a-FrbSdebl- — Le 
lb29e-a2elOac232fc = — |app=desktop&v=MaUlimSqlEE 18:05:46 |bes9-fef2612ea334 

a5dadb2a-6a9a-5429- ERROR - Something went wrong when parsing this message. Manually verify the message with Client Dop1.02.20 15.05.48 GE n acd38a7a-f708-4eb1- — ir 
[b29e-a2e10ac232fc [Conversation ID and Server Message ID in arroyo.db 18:05:49 |bc59-fef2612ea334 

UC ` Fattar du hur tråkigt jag har 2021-02-24 18: 1 we Jee 
VE bada 5429... Hahaha aaa ja fatta de baby 2021-02-24 18:06:47 2021-0224 1 a ees 
öga 620429: [Oj fråga vad jag gör sen bara öppna haha 2021-02-24 18:20:00 [2221-02-24 1 "cL ec en 
Lae CT. |Hahhaha svåra tider du vet baby 2021-02-24 18:20:21 [2021-0224 1 ee ll 
Ui CT.  Hahaha sluta lek svår din fis 2021-02-24 18:20:52 [2021-02-24 1 Fore 15489 
ll TO CDI GNNMGNEM AT 
a 5429- [Aaa älskling ska va de 2021-02-24 18:47:53 921.0224 1 none ode dale sib 
all D 2021-02-24 19:13:40 | 1 co cll ss 
ree KC. [Hor går de baby 2021-02-24 20:01:13 eg 1 A ` ees 
| lÅker Oslo baby 2021-02-24 20:07:17 DEN 1 ee Jee 
eee eer — No? [2021-02-24 20:07:24 oort 1 se Je 
ae a IUD A Be |- 
sk — Oki baby , åker du själv? [2021-02-24 20:08:12 [20210224 1 pene ee eem 
EE Se > n 
re 5429 NOkii baby kör forsiktig DEEN 20:08:58 [30:10:36 1 resi pen 
er kee DO I NA forener kb 
KG [År du påväg nu baby 2021-02-24 203222 a |} Dotes Fi 
Ki [Snart baby 2021-02-24 20:45:24 Éis |} bseosospos _ 15315 
KG  _|Okejälsking ät innan och köp snacks och dricka till resan Y [2021-02-24 20:49:17 NN SSV Fi 
Ke [baby honors Prom | coc _ 5317 
KG Dein [2021-02-24 21:51:00 Era. Gas Pn 
GE Jan Pass h Be be 
H2dadbda-6ada 29“ Gar det art hömta idag för min syster fuckar ur o h håller på att leta [2021-0224 21:52:04 [2021-02-24 1 re een 
Ke Pide luktar fet mycket renses his | rr P 
UNC cxa skriva mu till min vän vinta baby 2021.02.24 21:52:55 [20210224 1 mue cr Jee 
VE dada 5409... [Gár de och lägga osss dar vi sov sist [2021-0224 21:53:14 2021 02:24 1 ee — [5524 
Hadaibda-6ada 5109... [Nej det går ej lägga dar hon år hemma nu de år den fp021-02-24 21:54:06 [20210224 1 rer: 
Un ERC. |Abowbaby ska skriv nu till min van vänta Im 21:55:17 [0.1.0224 1 worms pe 
[Sdatb2a-6298-5429- — [ERROR - Something went wrong when parsing this message. Manually verify the message with Client 2021-02-24 21:55:38 | 2021-02-24 p DESEN ES 
|b29e-a2e10ac232fc [Conversation ID and Server Message ID in arroyo.db 21:56:20 [bc59-fef2612ea334 

Gi Ps pozrox2421sss1 [itay | Geo: Ps 
VER Gar de och ta bort imon kl L1max [2021-02-24 21:56:03 [pornos n unner | lis 
|#3dadbda-6aa-5429..8. p4 har hinat ett ställe 2021-02-24 21:56:12 2021-02-24 1 Pape 
[45da4b2a-6a9a-3429- [Asså grejen år dom håller på leta nu vart lukten konmer ifrån och 11 och innan går ej för min syster är vaken Last 97.24 21.56.53 [2021-0224 P acd3Sa7a-f708-4eb1- E 
lb29e-a2e10ac232f% ` Ja [21:57:04 loc59-fef2612ea334 

UE. [Abow vänta måste hitta nån som kör de [2021-02-24 21:59:14 [2021-02-24 1 RTR Jess 
[ibgatb)a-6ada 3409... [Om jag inte svarar hör ring kanya ar med henne och hon delar nat till mig baby 2021-02-24 22:06:35 [20210224 1 ul: Jee 
NC [Oli baby 2021-02-24 22:07:32 |2021 0224 1 en | (Sse 
LN 6a9a 3429- ` antar på svar ge mig 20-30min 2021-02-24 22:11:32 [2021-0224 1 ae — [555 
Ki rees 2021-02-24 a i er Fe 
VC. [Horubgar har inget liv 2021-02-24 22:39:32 eg 1 ne ees 
UNC. omg men pagud (2021-02-24 22:49:25 Im: 1 pre OE mees 
Rie NC. — Inget liv asså haha 2021-02-24 22:51:09 ee 1 mene oe 
Ui CT. |Pågudasså de bam fasoner 2021-02-24 22:51:32 [2021-02-24 1 run qM Ho bal 
EEN ` | Hur går de 2021-02-24 22:52:47 eg 1 ear ean 5542 
Vë aa baby fyfan asså inget iv @ @ & & & [2021-02-24 22:55:22 2021-0224 1 AAA 15543 
VC. ` pe gør de 2021-02-24 22:56:37 004 1 EK Jee 
VC ` e de baby [2021-02-24 22:56:41 ze N Sea Mus 
Ki [Väntar p svar baby p021-02-24 225727 es | E T Fe 
UNC. [Okej baby, hur gåre för dig har du börja åka 2021-02-24 22:58:10 |29210224 N pon — sur 
VE. AN inte an baby [2021-02-24 22:58:41 pernu 1 eene al O." 
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l45dadb2a-6a9a-5429- 


2021-02-24 


cal 0df2d-OSdf-4alc- 


|b29e-a2e10ac232fe [Máste ju till dig [2021-02-24 22:38:45 19.59.96 1 [bSfe-96£1099b03d e 
UC. [Men kan ingen annan hómta dom så du kan åka baby [2021-02-24 22:59:16 [2021-02-24 1 pet tara RU [5550 
a 5429- [Baby ingen svara typ 12021-02-24 22:59:40 Ge 1 ee per 
ZC. [Vántar på svar från en annan 2021-02-24 22:59:51 [2021-0224 1 aper ees 
VC lke älskling 2021-02-24 23:01:21 Des 1 iMd. sas 
ee ` ee snart mot dig [2021-02-24 23:12:09 p" 1 no bed dale ees 
LC. VVönta måste kolla att alla sover osv 2021-02-24 23:14:08 [20210224 1 SHEET ` mes 
aaa ae 29 — [Hittade du år de säkert ställe [2021-02-24 23:14:20 pare = 1 o a Jee 
e B 2021-02-24 23:14:20 Ds 1 veve es 
age CL. [Nej baby men får lägga ute 2021-02-24 23:15:32 [2021-02-24 1 alone ode E 
ee ` Men dom kan ej va ute [2021-02-24 23:15:44 aeu 1 SE" eer 
VT |Skitsamma baby de få bli så et par dagar 2021.02.24 23:16:05 20210224 1 uec Je 
gta nA RS" [Mende går ej de at fett riskabelt 2021-02-24 23:16:31 [20210224 1 xc Heil ba 
UE. [Ana baby de finns inget annat och göra nu 2021-02-24 23:21:25 > 1 ucc li [Sse 
com TI AMEN 00 7 
LE. kommer och hämta den snart baby 2021-02-24 23:26:11 d 1 E ees 
C RTT Sern) ee eem 
A TO women | EEE fm 
GE Jesse masons pann mes fm 
UC. [Ska du dka nu eller ska du åka inorgon baby 2021-02-25 00:55:28 12007 1 rines "ees 
agavaa dad [Nu jag ska åka baby 2021-02-25 00:55:41 Ka 1 en: s 
LN Ga9a 5129 Ska föröka komma hem imon [2021-02-25 00:55:50 1 cs 15574 
UE CT. |Okejälskling, va försiktig ta hans skor också ta inte vita 2021-02-25 01:21:12 E 1 e 111516 
VK CT. ` Oki baby ska göra de [2021-02-25 01:21:30 ps 1 Farrel ko 
nn NC. — Alskardig 2021-02-25 01:22:09 aor o | ser "ees 
ERST [eee O paan p preesse pe 
UE CT. om ni kan stanna vid en mack och köp dricka och snacks toll resan 20210225 01:28:27 I 1 sel on] 
ehr Aaa baby ska göra de 2021-02-25 01:28:59 Te 1 me ss 
Kc [PO p021-02-25013701 pss h A 
Hadadb2a-6ada-5429... Aiii blomman 2021-02-25 02:59:20 02102123 1 le ees 
tow (Godman baby rn geg gees 2021-0225 03:39:55 Iso |} Ges: ben 
data Ge | skar dig också baby skriv då och då hur ee går 9 €f 12021-02-25 03:59:17 er 1 EE seco Jee 
VC. Va baby ska göra de [2021-02-25 04:04:22 E 1 rcs sale”. es 
Ubdatb)a-6ada S429- |Kanske kommer inte ha nat dar baby så du vet 2021-02-25 04:04:34 100.002 1 Ee — [sere 
eh ke baby hur går det Y 2021-02-25 06:40:12 20210223 i TEE HEN 77 
5da402a-629a-5129- _|Ska somna om nu hoppas allt går bra baby, hor av dig då och da va försiktiga och ta hand om er baby - Älskar [5551 02.25 06.53.39 2021-0225 F acd3Sa7a-f708-4ebI- Loi 
b29e-a2e10ac232fe dig massor :00:08 be59-fef2612ea334 
VC. a baby vi ari gränsen vi fick inte komma inn 2021-02-25 09:00:39 |2021,02-23 1 ee — [sen 
O Va ska ni göra nu då baby ? Ska ni Aka hem elker vaddå 1021-02-25 09:59:37 [2921-02-25 1 see A 
VC. [Aaa baby vi ska åka hem nu snart 2021-02-25 09:59:54 [021022 1 ucc ce Jee 
CT ` |Harni ens sovit baby 2021-02-25 10:01:31 |1970-01-01 1 o e ` ees 
Gs Foren 2021-02-25 10:09:44 homo |} böressmonsoosa [26 
Kc P 2021-0225 10:09:50 [t sesso be 
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4. Ur det extraherade materialet syns en konversation med användaren "moe ameri". 


Tidsangivelserna i rapporten visar pa UTC-tid vilket innebär att för att fa reell svensk tid laggs 
1 timma till (svensk vintertid). 


2021-02-15 kl 01:09:39 skickar "moe_ameri” ett meddelande innehallande en adress 
”Lustgårdsgatan 5 Stadshagen”. Meddelandet låses av "mahadmose4211" kl 01:09:54. 


[se [void | username | 
ca10df2d-08df-4alc-b8fe-96£409£9003d |[11516 [mahadmose4211 | 
993 1aac0-3547-41f4-96c1-f38b6a150691 [11526 fmoe_ameri | 


Client Conversation ID Message Content ¡Creation Timestamp UTC+9| Read Timestamp UTC+0| Content Type Sender ID 
[c39b613d-6f5b-548d-854e-f4a4ccbl6cea|[076-885 24 53 2021-02-13 20:08:37 2021-02-13 20:08:38 1 


¡Server Message ID 


[993 laacO-3547-41£4-96c1-£38b6a150691|[255 y 
[c39b613d-6f5b-548d-854e-f4adccb1 6ceal[Lustgardsgatan 5 Stadshagen 2021-02-15 00:09:39 2021-02-15 00:09:54 1 


[993 1aac0-3547-41f4-96c1-£38b6a150691/[261 


/krinsp H Norlin 


P M Signerad av 


- 
Polise 6P58CT skriver om stoppet förberedelse till rån ^ ^ signerad datum 

Enhet Diarienr 

Region Stockholm, Grova brott 1 PO Sthlm Nord 5000-K189802-21 
Uppgiftslamnare Datum Tid 

Eliasson, Charlotte 2021-12-09 14:10 

Beslag verkstallt Material för analys 

Nej Nej 

Mottaget Mottaget datum Tid 


Sätt pa vilket uppgift lämnats 


Upprättad av 
Charlotte Eliasson 


Uppgiften avser 


Uppgift 


2021-02-11 kl 18:35 grips Mahad Ali, Pontus Lindstrand och Hussein Abbas på 
Artillerigatan, Göteborg i fordon EDP500 i ärende 5000-K170392-21 för förberedelse till 
grovt rån. I bilen anträffas bland annat en luftpistol som tas i beslag. Alla tre sitter 
frihetsberövade en natt, 2021-02-12 kl 16:25-16:30 verkställs hävningsbeslut på de 
frihetsberövade och samtliga tre försätts på fri fot. 


2021-02-11 kl 18:08:31 skickas ett meddelande från 6P58CT till GIZY V2. Därefter skickas 
inga meddelanden alls från 6P58CT fören 2021-02-13. 


2021-02-13 kl 13:32:49 skriver 6P58CT till 2CVOVD: 

”Vi hade i bilen en start pistol maskar handskar dom ba förberedelse till rån”. 
2021-02-13 kl 14:02:29 skriver 6P58CT till 2CVOVD: 

”Aaa en natt bara”. 

2021-02-13 kl 14:02:35 skriver 6P58CT till 2CVOVD: 

”Sen man släppte oss”. 


Undertecknad, 
Pa C.Eliasson 


